DevSecOps engineer

Role & responsibilities

1. Design and implement security controls for applications and cloud environments across development and production stages.
2. Conduct threat modeling, secure code review, and vulnerability assessments for web and cloud-native applications.
3. Implement identity and access management, encryption, and key management practices in cloud environments.
4. Collaborate with DevOps teams to integrate security into CI/CD pipelines and automate security testing.
5. Monitor cloud configurations and posture using CSPM and CWPP tools to detect and remediate risks.
6. Enforce compliance with frameworks such as ISO 27001, NIST, and CIS Benchmarks in application and cloud deployments.
7. Investigate and respond to security incidents involving applications, APIs, or cloud resources.
8. Implement Zero Trust and least privilege principles for application and infrastructure access.
9. Provide guidance on secure application architecture, container security, and data protection strategies.
10. Maintain documentation, dashboards, and metrics to report application and cloud security maturity to leadership.