Senior DevSecOps Engineer
Core
Implement on-prem security best practices, testing, and automation tools into CI/CD pipelines and production environments to integrate security throughout the software development lifecycle.
Role type
Senior DevSecOps Engineer
Builds
Secure CI/CD pipelines, container images, artifacts, and Kubernetes/OpenShift environments
Domain
Cybersecurity, DevSecOps, Cloud-Native
Required skills
SAST/DAST/SCA implementation, CI/CD pipeline security, Kubernetes/OpenShift security, Supply chain security (SBOM, artifact signing), Infrastructure as Code (Terraform, Ansible), Vulnerability management, Policy-as-code (OPA/Gatekeeper, Kyverno), Air-gapped environment security
Preferred skills
AI-based security tools, Threat modeling, Public cloud security (AWS, Azure, GCP)
Technologies
Jenkins, Git, Python, Bash, Groovy, Helm, Kustomize, SonarQube, Checkmarx, Coverity, OWASP ZAP, Trivy, Grype, OpenShift, Tanzu
Responsibilities
Integrate security practices from source code to production deployment; Manage automated security controls across CI/CD pipelines and registries; Operate security scanning tools and drive remediation; Strengthen Kubernetes environments via RBAC, secrets management, and network policies; Automate security processes and improve developer experience; Recommend architectures and tools for secure software delivery in disconnected environments
Seniority
Senior, hands-on IC