About this role
Purpose of the Job We are looking for a DevSecOps Engineer with around 5 years of experience to embed security into our development and deployment pipelines. The role focuses on integrating security controls into CI/CD, improving secure coding practices, and working closely with development, operations, and security teams. Job Description Integrate security tools (SAST, DAST, SCA) into CI/CD pipelines. Implement and maintain secure CI/CD pipelines using tools like Jenkins, GitHub Actions, GitLab CI, or Azure DevOps. Work with development teams to identify and remediate security vulnerabilities early in the SDLC. Support container and cloud security (Docker, Kubernetes, Azure/AWS). Enforce security best practices for infrastructure as code (IaC). Monitor and reduce security risks in building and deployment processes. Assist in security assessments, audits, and compliance requirements. Automate security checks and improve security visibility across pipelines. Collaborate with SOC and AppSec teams on vulnerability remediation. Integrate security tools (SAST, DAST, SCA) into CI/CD pipelines. Implement and maintain secure CI/CD pipelines using tools like Jenkins, GitHub Actions, GitLab CI, or Azure DevOps. Work with development teams to identify and remediate security vulnerabilities early in the SDLC. Support container and cloud security (Docker, Kubernetes, Azure/AWS). Enforce security best practices for infrastructure as code (IaC). Monitor and reduce security risks in building and deployment processes. Assist in security assessments, audits, and compliance requirements. Automate security checks and improve security visibility across pipelines. Collaborate with SOC and AppSec teams on vulnerability remediation. Job Requirements - Experience and Education 7+ years of experience in cyber security or cloud security, DLP, EDR, threat intelligence, email security, threat hunting…etc. Bachelor’s degree in IT, cyber security, or any related field Experience with security tools such as Checkmarx, SonarQube, Fortify, or similar. (preferred) Knowledge of cloud security posture management (CSPM). (preferred) Exposure to compliance standards (ISO 27001, SOC2, PCI DSS). (preferred) Security certifications (AWS/Azure Security, CEH, or equivalent). (preferred) Leadership Behaviors Building Outstanding Teams Setting a clear direction Simplification Collaborate & break silos Execution & Accountability Growth mindset Innovation Inclusion External focus Skills Business Acumen Communication Skills Cross-Functional Collaboration Interpersonal Skills Leadership Skills Learning Agility Analytical Thinking Results Driven