DEVSECOPS Engineer

Mid-Level Dev Sec Ops  Engineer

We are seeking a Mid-Level Dev Sec Ops  Engineer with 3 to 5 years of experience to integrate automated security practices directly into our software development lifecycle (SDLC). In this role, you will act as a bridge between development, security, and operations teams to ensure our cloud infrastructure and applications are secure by design. Your primary focus will be implementing "shift-left" security, automating security testing, and maintaining secure, resilient CI/CD pipelines.

Key Responsibilities:

• Pipeline Automation:
  Embed and maintain automated security gates (SAST, DAST, SCA) within our existing CI/CD pipelines.
• Vulnerability Triage:
  Analyze vulnerability scan results, eliminate false positives, and collaborate with developers to remediate real risks.
• Infrastructure as Code:
  Write and secure cloud infrastructure using IaC frameworks while enforcing policy-as-code rules.
• Secret Management:
  Implement and manage secure secret, token, and credential storage systems across all deployment environments.
• Compliance & Monitoring:
  Monitor cloud infrastructure for compliance drift, track audit logs, and configure security alerts.
• Threat Modeling:
  Participate in architectural security reviews and assist development teams with basic threat modeling.

Required Qualifications:

• Experience:
  
  3–5 years of professional experience in Dev Ops, Cloud Engineering, or App Sec roles.
• Cloud Infrastructure:
  Solid hands-on experience managing infrastructure with at least one major cloud provider (AWS, Azure, or GCP).
• Containers & Orchestration:
  Proven ability to build, secure, and debug Docker containers and Kubernetes workloads.
• IaC Tools:
  Practical experience writing reusable, secure code with tools like Terraform, Open Tofu, or Cloud Formation.
• Security Tooling:
  Active experience using vulnerability scanners such as Snyk, Sonar Qube, Aqua Security, Checkmarx, or Trivy.
• Automation & Scripting:
  Competency in writing automation scripts using Python, Bash, or Go.
• CI/CD Platforms:
  Familiarity with configuring automation pipelines using Git Hub Actions, Git Lab CI, or Jenkins.

Preferred Qualifications:

• Certifications:
  
  Holder of (or working toward) certifications like Certified Kubernetes Security Specialist (CKS) or AWS Certified Security - Specialty.
• Network Security:
  Basic understanding of VPC architecture, IAM roles, firewalls, and WAF configurations.