Devsecops Engineer
Core
DevSecOps Engineer bridging development, operations, and security to embed security throughout the software development lifecycle in a fast-growing global technology organization.
Role type
Senior IC DevSecOps Engineer
Builds
Automated security solutions, secure cloud infrastructure, and resilient deployment environments
Domain
Cloud Security / DevSecOps
Required skills
CI/CD pipeline integration, Infrastructure as Code (IaC) security scanning, policy-as-code, Web Application Firewall (WAF) management, containerization and orchestration (Docker, Kubernetes), security automation (SAST, DAST, vulnerability management), threat modeling, incident response, log analysis, scripting (JavaScript, TypeScript, Python)
Preferred skills
Cloud security architecture, enterprise-scale infrastructure, security compliance initiatives, internal controls, external audits
Technologies
Checkov, tfsec, Terrascan, Cloudflare, Docker, Kubernetes, Git, SAST, DAST, WAF
Responsibilities
Develop and maintain automated security tools and processes; Integrate security scanners into CI/CD pipelines; Identify and remediate infrastructure misconfigurations using policy-as-code; Collaborate on secure cloud infrastructure design; Establish and enforce security controls; Configure and optimize WAF solutions; Implement continuous security monitoring; Perform log analysis and support intrusion detection; Integrate security requirements into SDLC; Assess security risks and recommend mitigation strategies; Support compliance assessments and audits; Promote security awareness across engineering teams
Seniority
Senior, hands-on IC