USA_Engineer

Location:

Boston, MA Duration: 12 months Client: TCS Visa Restrictions:
None Rate:$ 60-80/hr on C2C Bill Rate: $70.00 - $90.00

- Cloud Dev Ops:
Yes, 17+ years - Kubernetes:
Yes, 17+ years

Key Responsibilities
1. Secure SDLC Application Security Embed security controls at every stage of the SDLC. Conduct threat modeling, secure code reviews, and risk assessments. Implement SAST, DAST, SCA tools and interpret results for development teams. Enforce secure coding standards and promote security-first development culture.
2. CICD Pipeline Security Build and maintain secure CICD pipelines (Git Hub Actions, Git Lab CI, Jenkins, Azure Dev Ops). Automate security scanning and policy enforcement in build and deployment workflows. Integrate secrets management and environment hardening into pipelines.
3. Cloud Infrastructure Security Implement Infrastructure as Code (IaC) security reviews using Terraform, Cloud Formation, ARM, or Pulumi. Validate and enforce cloud security best practices (AWS, Azure, GCP). Deploy and maintain cloud-native security tools such as AWS Guard Duty, Azure Defender, GCP SCC. 4. Container Kubernetes Security Build secure container images and manage scanning (Trivy, Aqua, Clair, Prisma Cloud). Enforce Kubernetes hardening controls (RBAC, network policies, pod security).

Monitor cluster security posture and remediate vulnerabilities.
5. Security Automation Tooling Develop automated playbooks scripts using Python, Bash, or Power Shell. Integrate SIEMSOAR platforms with build deployment workflows. Automate vulnerability management workflows and remediation processes.
6. Compliance Governance Support adherence to NIST, ISO 27001, SOC 2, PCI-DSS, and internal security policies. Implement guardrails and policy-as-code using OPA, Conftest, or AWSAzure policy engines. Produce audit-ready documentation and reporting.
7. Monitoring Incident Response Integrate security telemetry into pipelines and cloud environments. Respond to and triage security incidents related to CICD, code, or cloud workloads. Conduct root-cause analysis and implement preventative measures.

Required Skills Qualifications 37 years experience in Cybersecurity, Dev Sec Ops , or Cloud Security roles. Strong programming scripting abilities (Python, Go, Bash, or Power Shell). Hands-on experience with CICD tools and automation. Solid understanding of security vulnerabilities such as OWASP Top 10, CWE, CVE. Experience with containers and Kubernetes security. Familiarity with microservices, APIs, and distributed systems. Knowledge of cloud networking, identity, secrets management, and encryption.

Preferred Nice-to-Have Certifications CISSP, CISM, CCSP, AWSAzure Security Specialty, GIAC, or Dev Sec Ops  Professional Experience with Zero Trust architectures Supply-chain security (SBOMs, Sigstore, Cosign) Infrastructure Monitoring and Observability Serverless security Automated compliance frameworks