TAT IT Technolgies

Urgent requirement for
DevSecOps &amp; Cloud Security Consultant in Banking Domain
is required for our banking clients in
Oman
<ul>
<li>Hands-on experience embedding automated SAST, Secret Scanning, Dependency Scanning, and Software Supply Chain Security into pipelines is MUST</li>
<li>Deep experience scanning and manually reviewing Terraform, Ansible, CloudFormation, and K8s Helm Charts is MUST</li>
<li>Banking domain is MUST</li>
</ul>
Position Overview
The DevSecOps &amp; Cloud Security Consultant will embed security controls directly into the software development lifecycle (SDLC), CI/CD pipelines, and cloud environments. This role focuses on shift-left security, automated code/configuration scanning, cloud infrastructure assessments, and continuous vulnerability management.
Key Details
<ul>
<li>Experience Required: 3–5+ Years (DevSecOps / Cloud Security Focus)</li>
<li>Domain Focus: DevSecOps Automation, Cloud Infrastructure, Container Security</li>
<li>Certifications (Preferred): CKS, CCSP, CCSK, Certified DevSecOps Professional (CDP), AWS/OCI/Huawei Cloud Security Certifications</li>
</ul>
Core Responsibilities
<ul>
<li>Pipeline &amp; Code Security: Integrate and manage SAST, secret detection, dependency scanning, and container image scanning within CI/CD pipelines.</li>
<li>Infrastructure as Code (IaC) &amp; Helm Security: Review Terraform, Ansible, ARM templates, and Kubernetes Helm charts for hardcoded secrets, excessive IAM permissions, and misconfigurations.</li>
<li>Policy Enforcement &amp; Cloud Security: Validate Open Policy Agent (OPA) / Gatekeeper policies, assess cloud security posture (OCI, Huawei Cloud), and review network security groups (NSGs) and routing (DRGs).</li>
<li>Tool Evaluation &amp; POCs: Design, execute, and evaluate Proofs of Concept (POCs) for security tools spanning SAST, DAST, Container Security, Cloud Security, and API Security.</li>
</ul>
Skills
<ul>
<li>BFSI Domain: 3–5+ yrs experience in Banking / Fintech (Strict CI/CD security for digital banking, PCI DSS, regulatory cloud baselines).</li>
<li>DevSecOps &amp; CI/CD Security: Hands-on experience embedding automated SAST, Secret Scanning, Dependency Scanning, and Software Supply Chain Security into pipelines (Jenkins, GitLab CI, GitHub Actions, Azure DevOps).</li>
<li>IaC &amp; Helm Chart Audits: Deep experience scanning and manually reviewing Terraform, Ansible, CloudFormation, and K8s Helm Charts for insecure configurations, excessive IAM, and exposed secrets.</li>
<li>Cloud Security Configuration: Hands-on security posture review of Cloud Environments (OCI / Huawei Cloud / AWS / Azure), including IAM, NSGs, DRGs, encryption, and storage security.</li>
<li>Kubernetes &amp; Policy Enforcement: Experience with K8s Security &amp; Open Policy Agent (OPA) / Gatekeeper policy enforcement and container image scanning.</li>
<li>Vulnerability Management &amp; Tool POCs: Track record evaluating security tooling (SAST/DAST/Cloud/Container Security), managing POCs, validating false positives, and tracking remediation.</li>
</ul>
Skills: cloud,devsecops,security

DevSecOps & Cloud Security Consultant in Banking Domain

DevSecOps & Cloud Security Consultant in Banking Domain

This job is no longer available

Talents

Recruiters

About