DevSecOps Engineer

Quick Facts

DevSecOps Engineer role focused on security for cloud and container platforms.

Description

You will strengthen the security of infrastructure and services, and drive DevSecOps improvements across cloud and container environments. The role includes vulnerability discovery and remediation, coordinating security testing and technical audits, and automating security scanning in CI/CD.

Responsibilities

• Enhance security of infrastructure and supporting services
• Design, implement, and evolve DevSecOps practices in cloud and container environments
• Identify and eliminate vulnerabilities in architecture, applications, and infrastructure
• Coordinate and monitor security tests, pentests, and technical audits
• Manage deployment process for critical security updates and ensure timely vulnerability remediation
• Develop automation tools for security scanning integrated into CI/CD
• Build security standards, procedures, and best practices for applications and infrastructure
• Analyze security incidents and implement preventive actions

Requirements

• At least 5 years of experience in DevOps, Security Engineering, or DevSecOps
• Experience initiating and leading security improvement projects
• Comfortable working with cloud environments (especially GCP) and Kubernetes
• Experience securing infrastructure, applications, and CI/CD
• Knowledge of tools for vulnerability scanning, code security analysis, and threat monitoring
• Ability to independently run security risk discovery, assessment, and elimination
• Experience organizing/coordinating security testing and implementing recommendations after audits
• Understanding of IAM, networks, containerization, secrets, cryptography, and web application security
• Ability to collaborate with technical teams and drive security improvements
• Proactive approach with prioritization skills and ability to see initiatives through
• Desire to actively drive vulnerability elimination, not only identify threats
• Knowledge of Cloudflare and ability to leverage its features to improve application and infrastructure security