Devsecops Engineer

Job description - Devsecops Engineer

• Support the development and maintenance of DevSecOps procedures, standards, and policies to establish a strong baseline of secure development best practices across the organization
• Drive and support recurring secure development training programs and awareness initiatives for development and engineering teams
• Enforce information security policies, procedures, and practices aligned with published industry standards
• Ensure compliance with governance standards through internal audits and independent third-party verification
• Support teams in defining and implementing secure development initiatives and DevSecOps roadmaps
• Maintain and update scorecards to track compliance against DevSecOps-related KPIs and security metrics
• Collaborate with development and engineering teams to continuously improve DevSecOps processes, tools, and automation
• Integrate security tools into CI/CD pipelines using APIs, plugins, and automation frameworks
• Work closely with engineering teams to ensure security is embedded while architecting and building new systems
• Review and analyze risks associated with open-source components and third-party dependencies using Software Composition Analysis (SCA) tools
• Detect insecure modules, libraries, and dependencies within applications and recommend remediation actions
• Prepare security vulnerability, risk, and compliance reports for management review
• Manage DevSecOps-related issues and drive management decisions toward timely resolution
• Support secure coding methodologies and operational security solutions for complex business and technology environments