DevSecOps Engineer

We are looking for an experienced DevSecOps Engineer to help establish and maintain secure, scalable, and automated software delivery environments. You will work across development, operations, cloud, and security teams to embed security practices into the entire software development lifecycle.

The role involves securing CI/CD pipelines, cloud infrastructure, containers, and Infrastructure as Code while automating security controls and vulnerability management. You will also contribute to improving the organizations security posture without compromising development speed and operational efficiency.

Key Responsibilities

• Integrate security practices and automated security testing into CI/CD pipelines.
• Design and maintain secure CI/CD workflows across development and production environments.
• Implement SAST, DAST, SCA, container, and Infrastructure-as-Code security scanning.
• Identify, assess, prioritize, and remediate vulnerabilities.
• Secure cloud environments across AWS, Azure, or GCP.
• Implement security controls for Docker and Kubernetes environments.
• Secure Infrastructure as Code using Terraform or similar technologies.
• Manage secrets, credentials, certificates, and access controls.
• Automate security and compliance checks throughout the software delivery lifecycle.
• Monitor infrastructure, applications, and pipelines for security risks.
• Collaborate with developers, DevOps engineers, cloud engineers, and security teams.
• Investigate security issues and support incident response and remediation.
• Establish secure development and deployment standards.
• Improve security automation, monitoring, and vulnerability management processes.
• Contribute to security architecture and technical design decisions.
• Mentor junior engineers and promote secure engineering practices.

Required Skills & Qualifications

• 5+ years of experience in DevSecOps, DevOps, Cloud Security, Cybersecurity, or a related field.
• Strong experience with CI/CD platforms and DevOps practices.
• Hands-on experience with AWS, Azure, or GCP.
• Strong knowledge of Docker and Kubernetes.
• Experience with SAST, DAST, SCA, container, and IaC security tools.
• Strong understanding of Linux, networking, IAM, authentication, and authorization.
• Experience with Terraform or other Infrastructure-as-Code tools.
• Proficiency in Git and modern CI/CD platforms.
• Knowledge of cloud security and vulnerability management.
• Scripting experience with Python, Bash, PowerShell, or similar languages.
• Understanding of secure software development and security engineering principles.
• Strong analytical, troubleshooting, and communication skills.

This role

Team Cloud

Type Full-time

Location Canada(Toronto, Vancouver)/Hybrid , India(Bangalore)/Hybrid, USA(Fremont -California)/Hybrid

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.