Robotico Digital®

Position: DevSecOps &amp; Cloud Security Consultant
5–7+ years’ experience
Full-time onsite
Initial 1 year
Location: Muscat
1. Job description (JD)
The DevSecOps &amp; Cloud Security Consultant will perform security assessments of DevSecOps pipelines, cloud infrastructure, Kubernetes environments and application delivery processes. The consultant will review CI/CD security, Infrastructure as Code (IaC), Helm charts, source code, cloud configurations and security policies; identify vulnerabilities and misconfigurations; automate security controls; and support security tool evaluation and implementation.
Key responsibilities
<ul>
<li>Assess and strengthen security across CI/CD pipelines and DevSecOps workflows.</li>
<li>Review Infrastructure as Code (IaC) templates for insecure configurations, excessive permissions, hardcoded credentials and exposed secrets.</li>
<li>Conduct manual and automated security reviews of Kubernetes Helm charts.</li>
<li>Perform source code security reviews using Static Application Security Testing (SAST).</li>
<li>Assess cloud security configurations, identity and access management (IAM), network controls, encryption and logging.</li>
<li>Review Kubernetes security controls and container deployment configurations.</li>
<li>Implement or validate security automation and policy enforcement using OPA/Gatekeeper.</li>
<li>Support vulnerability management, risk assessment, remediation tracking and revalidation.</li>
<li>Evaluate security tools and conduct POCs across cloud, application, container, API and DevSecOps security.</li>
<li>Prepare assessment findings, risk ratings, remediation recommendations and technical reports.</li>
<li>Coordinate with development, infrastructure, cloud and Information Security teams.</li>
</ul>
2. Mandatory technical skills
The following skills are explicitly identified in the RFP's Resource 2 profile.
Skill area
Required expertise
DevSecOps security
Security integration throughout software development and deployment workflows
CI/CD security
Pipeline security reviews, automated testing integration and secure delivery processes
Infrastructure as Code (IaC)
Reviewing infrastructure templates for security risks and misconfigurations
Helm chart security
Reviewing deployment charts, Kubernetes security settings and secure deployment practices
Source code review (SAST)
Static analysis and identification of insecure coding practices and vulnerabilities
Cloud security
Cloud configuration reviews, IAM controls, network security, encryption and logging
Kubernetes security
Kubernetes environments, access controls, workloads, configurations and security baselines
Vulnerability management
Vulnerability identification, validation, prioritisation, remediation tracking and retesting
Security automation
Automating security checks and integrating security controls into delivery workflows
Policy enforcement
OPA/Gatekeeper policy validation, compliance enforcement and deployment controls
Security tool evaluation
Assessing security tools, conducting POCs and documenting findings and recommendations
3. Experience requirements
<ul>
<li>Overall experience: 5–7+ years in DevSecOps and cloud security.</li>
<li>Hands-on experience securing CI/CD pipelines and software delivery workflows.</li>
<li>Experience reviewing IaC templates, Helm charts and source code.</li>
<li>Experience with cloud security configurations and Kubernetes environments.</li>
<li>Practical knowledge of vulnerability management and security automation.</li>
<li>Experience implementing or validating policy enforcement using OPA/Gatekeeper.</li>
<li>Experience evaluating security tools and supporting POC activities.</li>
</ul>
4. Qualifications and certifications
Graduate with below certifications will be preferred.
<ul>
<li>CEH — Certified Ethical Hacker</li>
<li>CISSP — Certified Information Systems Security Professional</li>
<li>OSCP — Offensive Security Certified Professional</li>
<li>CISA — Certified Information Systems Auditor</li>
<li>CISM — Certified Information Security Manager</li>
</ul>

DevSecOps & Cloud Security Consultant

DevSecOps & Cloud Security Consultant

This job is no longer available

Talents

Recruiters

About