DevSecOps Engineer

JOB SUMMARY

Are you a passionate, high-energy engineer who dreams in YAML and thinks firewalls are just misunderstood friends? We're on the hunt for someone who can blend security into our CI/CD pipelines like a barista blends espresso—smooth, strong, and absolutely essential. You'll automate all the things, squash vulnerabilities before they even think about showing up,

As a day in the life, you will help build secure, scalable and resilient systems from the ground up and responsible for integrating security best practices into the development lifecycle and CI/CD pipelines. This role ensures Infrastructure as Code (IaC), applications, and deployment processes are scalable, and compliant. If you are someone who thrives on cross-functional collaboration- partnering with developers, operations, and security teams to automate and optimize security controls and reduce risk throughout the SDLC- we would be excited to connect with you.

KEY DUTIES & RESPONSIBILITIES

• Embed security controls into CI/CD pipelines, source code repositories, and containerization platforms.
• Develop and maintain automated security testing tools for static (SAST), dynamic (DAST), and dependency (SCA) analysis.
• Perform threat modeling and secure code reviews for cloud-native and microservices architectures.
• Partner with DevOps and engineering teams to build infrastructure as code (IaC) with secure baselines.
• Define and enforce security requirements in build and deployment processes.
• Monitor security metrics across development pipelines and respond to incidents related to application security.

KNOWLEDGE & SKILLS

• Strong experience with CI/CD platforms (i.e. - Azure DevOps, GitHub Actions, GitLab, etc.).
• Hands-on knowledge of IaC (i.e. - Terraform, CloudFormation) and container security (i.e. - Docker, Kubernetes).
• Familiarity with common security vulnerabilities (OWASP Top 10) and secure coding practices.
• Experience using AWS and Google Cloud

WORK EXPERIENCE – MINIMUM REQUIRED

EDUCATION