DevSecOps Engineer

About the role

We are seeking a proactive DevSecOps Engineer to embed security into our cloud‑native development pipelines. The role works closely with engineering, security and operations teams to automate controls, improve resilience and ensure compliance.

Key responsibilities

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security scanning tools (SAST, DAST, SCA, container and IaC scanning) into the software development lifecycle.
• Automate infrastructure provisioning using Infrastructure as Code (Terraform, CloudFormation, or similar).
• Manage and secure cloud environments (AWS, Azure, or GCP).
• Implement and maintain container security for Docker and Kubernetes workloads.
• Monitor infrastructure and applications for vulnerabilities and operational health.
• Collaborate with development teams to remediate vulnerabilities and promote secure coding practices.
• Implement secrets management, IAM, and least‑privilege access controls.
• Support incident response, vulnerability management, and security investigations.
• Ensure compliance with security standards, policies, and regulatory requirements.
• Optimize deployment automation, system reliability, scalability, and disaster‑recovery processes.
• Maintain documentation for infrastructure, security processes, and operational procedures.

Required profile

• Bachelor's degree in Computer Science, IT, Cyber Security or a related field.
• 4–6 years of experience in DevOps, Cloud Engineering or DevSecOps.
• Hands‑on experience with AWS cloud services.
• Experience building CI/CD pipelines using GitHub Actions, GitLab CI/CD, Jenkins or Azure DevOps.
• Experience with Infrastructure as Code using Terraform or CloudFormation.
• Practical experience with Docker and Kubernetes.
• Strong understanding of Linux systems and networking fundamentals.
• Proficiency in scripting with Bash or Python.

Required skills

• AWS
• GitHub Actions
• GitLab CI/CD
• Jenkins
• Azure DevOps
• Terraform
• CloudFormation
• Docker
• Kubernetes
• Linux
• Bash
• Python
• Git
• Snyk
• Trivy
• SonarQube
• OWASP ZAP
• Checkov
• Grafana
• Prometheus
• ELK
• Datadog
• CloudWatch
• IAM
• Secrets management
• Cloud security best practices