Role Overview

We are looking for a highly motivated DevSecOps Engineer who will be responsible for integrating security at every stage of the software development lifecycle. The ideal candidate has strong experience in CI/CD automation, cloud platforms, and security best practices in DevOps environments.

You will collaborate closely with development, operations, and security teams to ensure the successful delivery of secure and scalable software products.

Key Responsibilities

• Embed security practices into CI/CD pipelines (GitLab / GitHub Actions / Azure DevOps).
• Conduct security scanning, vulnerability assessments, and address findings in collaboration with development teams.
• Manage and automate infrastructure using IaC tools (Terraform, CloudFormation, or similar).
• Implement continuous monitoring, auditing, and logging of critical systems.
• Develop and maintain secure cloud environments (AWS / Azure / GCP).
• Collaborate with engineering teams to improve application and environment security.
• Create technical documentation and contribute to DevSecOps best practices.

Required Qualifications

• 3–5 years of hands-on experience in DevOps / DevSecOps roles.
• Strong scripting skills (Bash, PowerShell, Python, or Go).
• Experience with cloud platforms (AWS / Azure / GCP).
• Experience with CI/CD tools (GitLab / GitHub Actions / Jenkins / Azure DevOps).
• Knowledge of containerization and orchestration (Docker & Kubernetes).
• Solid understanding of security tools such as:
  • SAST / DAST solutions (SonarQube, OWASP ZAP, etc.)
  • Dependency & vulnerability scanning tools (Snyk, Trivy, Prisma, etc.)
• Familiarity with log monitoring tools (ELK, Grafana, Prometheus, etc.)
• Good understanding of networking, firewalls, API security, and IAM.