DevSecOps Engineer

About the role

We are looking for a DevSecOps professional to embed security throughout the software development lifecycle and CI/CD pipelines. The role focuses on improving application, cloud, and infrastructure security by implementing automated security controls, vulnerability management processes, and secure deployment practices, primarily within AWS environments.

Key responsibilities

• Integrate security into the SDLC, CI/CD pipelines, and release processes.
• Conduct threat modelling and security reviews for applications and platforms.
• Implement security tools such as SAST, DAST, SCA, secrets scanning, container scanning, and IaC scanning.
• Manage vulnerability remediation, security findings, and risk exceptions.
• Secure AWS cloud environments, containers, serverless applications, and infrastructure-as-code platforms (Terraform, CloudFormation, Ansible).
• Enhance software supply chain security, including dependency management, SBOMs, and artifact integrity.
• Implement secure identity, access, and secrets management practices.
• Support security monitoring, incident response, compliance reviews, and audit requirements.
• Collaborate with development, infrastructure, security, and compliance teams to drive a security-first culture.

About you

• Bachelor's Degree in Computer Science, Cybersecurity, IT, or related field.
• Minimum 3 years of experience in DevSecOps, Application Security, Cloud Security, or Secure CI/CD environments.
• Strong knowledge of AWS security, DevSecOps practices, secure SDLC, and vulnerability management.
• Hands-on experience with GitLab, GitHub, Bitbucket, Terraform, Docker, and cloud security controls.
• Familiarity with security frameworks such as OWASP, ISO 27001, NIST, CIS Benchmarks, and BNM RMiT.
• Scripting and automation skills using Python, Bash, or PowerShell.