DevSecOps

Key Responsibilities:

·       Security Integration: Implement security practices into the DevOps lifecycle from development to deployment. Maintain security tools and processes within CI/CD pipelines, enforcing pipeline security standards, code reviews, and vulnerability testing.

·       Automation & IaC: Automate security controls, governance, and compliance validation. Develop and maintain Infrastructure as Code (IaC) using tools like Terraform, Ansible, or CloudFormation to improve efficiency and reduce errors.

·       Monitoring & Incident Response: Implement and manage monitoring/logging solutions to detect threats. Establish incident response procedures, conduct regular drills, assist during security incidents, and perform root cause analysis.

·       Collaboration & Communication: Work with developers, operations, and security teams to integrate security seamlessly. Participate in Agile ceremonies and provide security training/awareness for dev and ops teams.

·       Continuous Improvement: Update security practices based on industry trends and threat intelligence. Refine DevOps processes and standards continuously.

Required Knowledge & Experience:

·       Tools: GitLab, Grafana, Loki, Tempo, Mimir, Helm, Kubernetes, GCP, ArgoCD

·       Skills: DevOps, Observability, Platform Engineering, Cloud Engineering