DevSecOps Engineer

About the role

The role focuses on preventing security vulnerabilities across production, staging, and development environments. The Engineer will embed security controls into CI/CD pipelines, enforce strict access management, manage patching, and support audit compliance.

Key responsibilities

• Integrate SAST, SCA and DAST tools into CI/CD pipelines (GitHub/GitLab).
• Build and maintain secure pipelines and enforce encrypted backups (AES‑256) for SharePoint content databases.
• Automate permission audits, external‑sharing reviews and quarterly access reviews.
• Implement Transparent Data Encryption (TDE), Row‑Level Security (RLS) and dynamic data masking for production databases.
• Run automated vulnerability assessments and perform quarterly restoration tests.
• Enforce MFA, RBAC and manage change‑control processes, including blackout windows.
• Maintain strict environment separation (prod/staging/dev) with no production data in non‑production.
• Track end‑of‑life dates for operating systems, applications, frameworks and dependencies.
• Prepare audit evidence and produce monthly security reports.

Required profile

• 3+ years of experience in DevSecOps, DevOps or Security Engineering.
• Relevant certifications such as DevSecOps Professional, CISSP, CEH, Security+ or AWS Security Engineer.
• Experience with Microsoft technologies (SQL Server, SharePoint) and cloud secret‑management solutions.

Required skills

• .NET
• SharePoint
• SQL Server
• Python
• SonarQube, Snyk, Bandit, Safety, OWASP Dependency‑Check
• GitHub, GitLab
• AWS Key Vault, HashiCorp Vault
• PowerShell, Bash
• NIST, SOC2, ISO 27001
• Transparent Data Encryption (TDE)
• Row‑Level Security (RLS)
• Dynamic Data Masking
• SharePoint PnP PowerShell automation
• MFA, RBAC
• AES‑256 encryption