DevSecOps & Cloud Security Consultant
Listed on 2026-10-18
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Security Management & Operations -
Security
Cybersecurity, Information Security & Data Protection, Security Management & Operations
Role:
Dev Sec Ops & Cloud Security Consultant
Experience:
5–7+ Years
Work Mode:
Full-time, Onsite
Notice Period:
Immediate to 15 Days Preferred
Relocation:
Must be willing to relocate to Muscat
Qualification:
Graduate
Certifications:
CEH / CISSP / OSCP / CISA / CISM preferred
Role:
Dev Sec Ops & Cloud Security Consultant
Experience:
5–7+ Years
Location:
Muscat, Oman
Work Mode:
Full-time, Onsite
Notice Period:
Immediate to 15 Days Preferred
Relocation:
Must be willing to relocate to Muscat
Communication:
Excellent communication skills required
Qualification:
Graduate
Certifications:
CEH / CISSP / OSCP / CISA / CISM preferred
We are looking for an experienced Dev Sec Ops & Cloud Security Consultant to assess, strengthen, and implement security controls across CI/CD pipelines, cloud infrastructure, Kubernetes environments, and application delivery workflows.
The ideal candidate should have hands‑on experience in Dev Sec Ops security assessments, Infrastructure as Code (IaC) reviews, Helm chart security, source code security analysis (SAST), cloud security configurations, vulnerability management, and security automation. The candidate should also be experienced in policy enforcement using OPA/Gatekeeper and evaluating security tools through proof‑of‑concept (POC) activities.
Roles and Responsibilities- Assess and strengthen security across CI/CD pipelines and Dev Sec Ops workflows.
- Review Infrastructure as Code (IaC) templates to identify security risks, misconfigurations, excessive permissions, hardcoded credentials, and exposed secrets.
- Conduct manual and automated security reviews of Kubernetes Helm charts.
- Perform source code security reviews using Static Application Security Testing (SAST) tools.
- Assess cloud security configurations, Identity and Access Management (IAM), network controls, encryption, and logging.
- Review Kubernetes security controls, workload configurations, access controls, and container deployment practices.
- Implement or validate security automation and policy enforcement using OPA/Gatekeeper.
- Manage vulnerabilities, assess risks, track remediation activities, and validate fixes through retesting.
- Evaluate security tools and conduct POCs across cloud, application, container, API, and Dev Sec Ops security.
- Prepare security assessment reports, document findings, assign risk ratings, and recommend remediation measures.
- Collaborate with development, infrastructure, cloud, and Information Security teams to implement security best practices.
- Support secure software delivery by integrating automated security checks and controls into development and deployment workflows.
- 5–7+ years of relevant experience in Dev Sec Ops and cloud security.
- Hands‑on experience securing CI/CD pipelines and software delivery workflows.
- Experience reviewing IaC templates, Helm charts, and source code for security vulnerabilities.
- Strong knowledge of cloud security configurations and Kubernetes environments.
- Practical experience in vulnerability identification, prioritisation, remediation, and revalidation.
- Experience implementing or validating security policies using OPA/Gatekeeper.
- Experience evaluating security tools and supporting POC activities.
- Graduate qualification; relevant security certifications are preferred.
- Willingness to work full-time onsite in Muscat, Oman.
- Must be willing to relocate to Muscat.
- Immediate to 15 days' notice period preferred.
- Excellent communication skills are mandatory.
- Contract duration is initially one year, with the possibility of extension.
- Dev Sec Ops Security
- CI/CD Pipeline Security
- Infrastructure as Code (IaC) Security
- Kubernetes Security
- Helm Chart Security
- Source Code Security Review (SAST)
- Cloud Security and IAM
- Vulnerability Management and Risk Assessment
- Security Automation
- OPA/Gatekeeper Policy Enforcement
- Security Tool Evaluation and POC Execution
- Security Assessment and Remediation Reporting
- CEH – Certified Ethical Hacker
- CISSP – Certified Information Systems Security Professional
- OSCP – Offensive Security Certified Professional
- CISA – Certified Information Systems Auditor
- CISM – Certified Information Security Manager
- Bachelor accommodation, airfare, and visa sponsored by the company.
Candidates must be willing to relocate to Muscat and work full-time onsite. Immediate to 15 days' notice period is preferred.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).