DevOps Engineer (security)
Core
Embed security testing and compliance automation into CI/CD pipelines to protect business-critical applications (SAP/Oracle) across cloud and hybrid environments.
Role type
DevSecOps Engineer
Builds
Secure CI/CD frameworks, automated security testing tooling, and compliance automation for enterprise application landscapes.
Domain
Cybersecurity / Cloud Infrastructure / DevOps
Deliverable
production ML models | product features | infrastructure
Required skills
Shift-Left-On-Security frameworks, SAST/DAST/SCA testing, Threat Modeling, Penetration testing coordination, Linux system administration, Python/Bash scripting, Container orchestration (Kubernetes), CI/CD pipeline development
Preferred skills
Compliance auditing (ISO 27001/NIST/PCI DSS), Infrastructure as Code (Terraform), Grafana/New Relic/OpenTelemetry observability
Technologies
GitLab, AWS, Azure, GCP, Docker, Kubernetes, Terraform, Grafana, New Relic, OpenTelemetry
Responsibilities
Embed SAST/DAST/SCA tools into GitLab CI/CD pipelines; Perform platform security assessments and verify exploits; Coordinate penetration testing activities and secure access; Conduct threat modeling for new features; Generate compliance reports and support security audits; Advocate for secure coding standards across engineering teams.
Seniority
Mid-level, hands-on IC