DevSecOps Engineer

Job Summary:

We are seeking a DevSecOps Engineer to integrate development, security, and operations practices into one streamlined approach. You will be responsible for designing and implementing scalable, secure systems while working closely with development and operations teams to enhance the overall security posture of our infrastructure and applications.

Key Responsibilities:

• Collaborate with software engineers to embed security in every stage of the development lifecycle.
• Design, test, and implement secure development practices, standards, and policies.
• Automate security controls, vulnerability management, and data protection in CI/CD pipelines.
• Monitor applications and infrastructure continuously to detect and respond to threats.
• Participate in incident response, including forensic analysis and post-mortem evaluations.
• Conduct regular security assessments, audits, and compliance checks.
• Train development and operations teams on secure coding and threat mitigation techniques.
• Document and maintain security procedures aligned with business processes.
• Stay up to date with emerging security technologies and incorporate them into architecture and processes.

Qualifications:

• Bachelor’s degree in Computer Science, Engineering, or a related field.
• At least 5 years of hands-on experience in DevSecOps, DevOps, or a related technical role.
• Proficiency with DevSecOps toolkits:
  • Ansible, Jenkins, Artifactory, Jira, Black Duck, Terraform, Git
• Familiarity with DevOps automation tools such as:
  • Terraform, GitHub Actions
• Experience with security services/tools:
  • Prisma Cloud, SIEM, SOC, Nessus, CrowdStrike
• Strong understanding of information security frameworks and standards.
• Excellent communication skills and ability to work cross-functionally.
   
• Strong problem-solving and analytical skills.
• Comfortable working in a collaborative, fast-paced environment.
• Quick to adapt and learn new technologies.

Preferred/Optional Skills:

• Scripting languages:
  • SQL, Bash, Perl, PowerShell, Ruby, Python
• Hands-on experience with:
  • CI/CD Pipelines
  • Kubernetes / Docker
  • Cloud platforms (AWS, Azure, GCP)
  • Version control systems (Git, SVN)
  • Infrastructure-as-Code tools like Terraform