DevSecOps Engineer

Integrate and optimize security controls within CI/CD pipelines.
Work with tools like SAST, DAST, SCA, container scanning, and secrets detection.
Partner with developers, architects, and QA to embed security early in the SDLC.
Reduce turnaround time and offload senior architects by handling routine and mid-complexity requests.
Track request volumes, turnaround times, and quality metrics to drive continuous improvement. Hands-on experience with security tools (e.g., SonarQube, Checkmarx, Fortify, Aqua, Trivy).
Familiarity with container security, IaC scanning, and SBOM generation.
Scripting skills (Python, Bash, or similar) for automation.
Excellent communication and documentation skills. Knowledge of CNAPP, secure design patterns, and cloud-native security.
Certifications such as CSSLP, GCSA, or equivalent are a plus.