DevSecOps Engineer

Responsibilities

• Design and maintain secure cloud infrastructure (AWS preferred).
• Build and improve security monitoring, alerting, and incident response capabilities.
• Manage and support ISO 27001, SOC 2, and other compliance initiatives.
• Lead security audits, certifications, and client security assessments/questionnaires.
• Drive remediation of security vulnerabilities and static code analysis findings.
• Oversee penetration testing and track remediation efforts.
• Implement security best practices across CI/CD pipelines and development workflows.

Requirements

• 4+ years of experience in DevOps, Security Engineering, DevSecOps, or related roles.
• Strong hands-on experience with AWS and cloud security.
• Experience with CI/CD, Infrastructure-as-Code (Terraform/CloudFormation), and security automation.
• Familiarity with ISO 27001, SOC 2, security audits, and compliance programs.
• Knowledge of vulnerability management, SAST tools, and security monitoring.
• Strong communication skills and ability to work with both engineering teams and clients.

Nice to Have

• Experience in regulated industries (FSI, FinTech, Banking, Insurance).
• Exposure to penetration testing or offensive security.
• Security certifications such as CISSP, CISM, CCSP, or AWS Security Specialty.