Job Summary
We are looking for a DevSecOps Engineer to integrate security into enterprise CI/CD pipelines and cloud-native deployments. The ideal candidate should possess strong expertise in Infrastructure as Code security, container security, Kubernetes security, and software supply chain security.
Key Responsibilities
- Build secure CI/CD pipelines.
- Implement Infrastructure as Code scanning.
- Secure Kubernetes and Docker environments.
- Integrate SAST, DAST, and SCA tools.
- Implement container image scanning.
- Automate security controls.
- Support cloud security compliance.
- Develop DevSecOps automation.
- Implement secrets management.
- Collaborate with security engineering teams.
Required Skills
- Jenkins
- GitHub Actions
- Terraform
- Docker
- Kubernetes
- Trivy
- Snyk
- GitHub Advanced Security
- SonarQube
- HashiCorp Vault
- AWS
- Azure
- Python
- Bash
Preferred Skills
- Checkmarx
- Veracode
- ArgoCD
- OPA
- Kyverno
- Cosign
Mandatory Skills
- DevSecOps
- Terraform
- Docker
- Kubernetes
- GitHub Actions
- Trivy
- Snyk
- SonarQube
- HashiCorp Vault
- AWS/Azure