Devsecops Engineer- remote

Design, implement, and maintain security gates and automated security checks within our CI/CD pipelines (e.g., Jenkins, GitLab CI, GitHub Actions)

Integrate and manage SAST, DAST, SCA, and container security scanning tools.

Automated infrastructure compliance security validation using tools like Open Policy Agent(OPA).

Together, these two functions work in tandem to provide strong protection for sensitive information, while ensuring operational efficiency and adherence to security standards and compliance requirements.

Security Champion & Culture

Advocate for and educate development teams on security best practices, threat modeling, and secure coding techniques.

Foster a culture of secure as a shared responsibility across the organization.

Lead security reviews and threat modelling sessions for new features and architecture.

Secure CI/CD Pipeline Management

Design, implement, and maintain security gates and automated security checks within our CI/CD pipelines (e.g., SonatQube, Nexus IQ, and Tenable).

Automated infrastructure compliance and security validation using tools like Open Policy Agent (OPA).

Requirements

We are seeking a highly skilled and passionate DevSecOps Engineer to champion the integration of security practices into every stage of our Software Development Lifecycle (SDLC).

The candidate will be a key player in our Cloud/Platform engineering team, bridging the gaps between development, operations, and efficient cloud infrastructure.

Understands how to embed security seamlessly into a fast-paced, agile environment without sacrificing velocity or developer experience.