Senior DevSecOps Engineer
Core
Strengthen security of cloud-native infrastructure and development pipelines by integrating security practices across the SDLC.
Role type
Senior DevSecOps Engineer
Builds
Secure, scalable cloud and on-prem environments with automated security controls and CI/CD pipelines.
Domain
Cybersecurity, Cloud Infrastructure, DevOps
Required skills
Cloud security (AWS, GCP, Azure), Infrastructure as Code (Terraform, Ansible), CI/CD pipeline security (Jenkins, GitHub Actions, ArgoCD), Container security (Kubernetes), Security scanning (SAST, DAST, SCA), Scripting (Python, Bash), Zero-trust models, IAM, Secrets management, Compliance frameworks (CIS, NIST, ISO 27001, SOC2)
Preferred skills
Endpoint security, AI security, Policy as code (OPA, Kyverno), Advanced compliance (FedRAMP, HIPAA, PCI-DSS)
Technologies
AWS, Kubernetes, EKS, ECS, Jenkins, GitHub Actions, Terraform, Ansible, ArgoCD, Python, Bash, Go, Prometheus, Grafana, Loki, MongoDB, RabbitMQ, Postgres, Neo4J
Responsibilities
Integrate security into CI/CD pipelines and SDLC; Design and implement automated security solutions; Build and maintain IaC for secure cloud environments; Automate security controls across cloud and Kubernetes; Secure cloud and on-prem environments (IAM, network, encryption); Manage and harden Kubernetes workloads; Conduct security assessments, penetration testing, and compliance audits; Monitor threats and respond to incidents; Promote DevSecOps culture; Enhance observability with monitoring and SIEM solutions
Seniority
Senior, hands-on IC