DevSecOps Engineer/Lead
Core
Architect, maintain, and scale security automation across software development lifecycles (SDLC) by embedding SAST, DAST, and SCA tools into CI/CD pipelines.
Role type
DevSecOps Engineer/Lead
Builds
Secure CI/CD pipelines and automated security gatekeeping for software releases
Domain
Software Engineering / Application Security
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
CI/CD pipeline automation, SAST/DAST/SCA tool configuration, vulnerability triage, IaC (Terraform), container security (Docker/Kubernetes), code review across multiple languages
Preferred skills
Certified DevSecOps Professional (CDP), Practical DevSecOps (CDEP), CSSLP
Technologies
Checkmarx, Semgrep, Snyk, SonarQube, Burp Suite Professional, GitHub Actions, GitLab CI, Jenkins, Bitbucket Pipelines, Terraform, Docker, Kubernetes
Responsibilities
Integrate and manage static, dynamic, and software composition analysis tools into CI/CD pipelines; Configure automated dynamic scanners and leverage Burp Suite Professional for targeted security testing; Triage code vulnerabilities and provide remediation guidance; Monitor open-source dependencies and license compliance; Define automated gatekeeping thresholds within deployment pipelines
Seniority
Mid-Senior, hands-on IC
