DevSecOps & Infrastructure Engineer

About the role

This position owns application and DevSecOps security from day one and will gradually expand into broader infrastructure and cloud security responsibilities. The ideal candidate has strong fundamentals and a proven ability to learn new security domains independently.

Key responsibilities

• Implement and manage SAST, DAST, SCA, and container scanning tools such as Snyk, Semgrep, Trivy, and SonarQube.
• Secure CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins) with security gates and SBOM generation.
• Conduct threat modeling and security reviews of applications, APIs, and cloud‑native workloads.
• Administer Cloudflare security services, including WAF, rate limiting, DDoS protection, and origin protection.
• Manage application secrets using HashiCorp Vault or GCP/AWS Secrets Manager and eliminate hard‑coded credentials.
• Coordinate penetration‑testing engagements and track remediation of identified vulnerabilities.
• Maintain secure coding standards aligned with the OWASP Top 10 and deliver secure‑coding training.
• Lead a Security Champions program and support broader network and identity security initiatives.

Required profile

• Strong understanding of CI/CD systems and container/Kubernetes security.
• Proficiency in scripting with Python, Go, or Bash.
• Hands‑on experience with Google Cloud Platform (GCP).
• Demonstrated ability to quickly learn new security domains or tools with minimal guidance.

Required skills

• SAST, DAST, SCA tools (Snyk, Semgrep, Trivy, SonarQube)
• CI/CD platforms (GitHub Actions, GitLab CI, Jenkins)
• SBOM generation
• Threat modeling
• Cloudflare WAF, rate limiting, DDoS protection
• HashiCorp Vault, GCP/AWS Secrets Manager
• Penetration‑testing coordination
• OWASP Top 10 secure coding standards
• Kubernetes security
• Network security appliances (Palo Alto, Fortinet, SonicWall)
• Active Directory, Group Policy, certificate management
• Zero Trust Network Access (ZTNA) and Zero Trust VPN
• Basic knowledge of AWS and Azure services