DevSecOps Engineer
Core
Integrate security controls, vulnerability detection, and policy enforcement into Azure DevOps and GitHub CI/CD workflows to secure the software development lifecycle.
Role type
Senior DevSecOps Engineer
Builds
Secure CI/CD pipelines, containerized applications, and automated security toolchains for enterprise software delivery.
Domain
Cloud-native security, DevSecOps, and Azure environments
Required skills
Azure DevOps, GitHub, CI/CD pipeline management, SonarQube, Fortify, Sonatype, Katalon, OpenShift, Kubernetes, PowerShell, Python, Bash, secure coding practices, OWASP Top 10, vulnerability triage, repository migration
Preferred skills
GitHub Advanced Security, Open Policy Agent, Azure Policy, CISSP, CSSLP, CEH, NIST, ISO 27001, SOC 2 compliance
Technologies
Azure DevOps, GitHub, SonarQube, Fortify, Sonatype, Katalon, OpenShift, Kubernetes, PowerShell, Python, Bash
Responsibilities
Integrate security controls and vulnerability scanning into CI/CD pipelines; Configure and maintain DevSecOps toolchain capabilities; Collaborate with development teams to remediate security findings; Establish governance and compliance controls; Monitor and respond to vulnerabilities across SDLC tooling; Execute repository and pipeline migrations; Develop reusable automation scripts and security standards.
Seniority
Senior, hands-on IC