Senior Devops Engineer

Key Responsibilities

• DevSecOps Integration: Integrate security practices, testing, and reviews into all stages of the software development lifecycle.
• CI/CD Security Automation: Implement and maintain security scanning tools, including SAST, DAST, Software Composition Analysis (SCA), and secrets scanning, within CI/CD pipelines.
• Vulnerability Management: Conduct vulnerability assessments, threat modeling, and security testing. Identify, prioritize, and remediate vulnerabilities in production systems handling real user data.
• AWS Security: Secure AWS infrastructure by implementing and managing IAM policies, Security Groups, AWS KMS, Secrets Manager, and other relevant security controls.
• Infrastructure as Code Security: Implement security best practices for infrastructure provisioned using Terraform or AWS CloudFormation.
• Container Security: Secure containerized applications and orchestration environments using Docker and Kubernetes.
• Security Monitoring and Incident Response: Implement monitoring and observability solutions using tools such as ELK Stack, Grafana, and SIEM platforms to detect, investigate, and respond to security incidents.
• Compliance and Governance: Drive the implementation and successful completion of security compliance initiatives, including ISO 27001, SOC 2, or PCI-DSS.
• Security Collaboration: Collaborate with engineering and infrastructure teams to promote secure coding practices, mitigate emerging threats, and improve the organization's security posture.
• AI-Driven Security: Leverage AI/ML-based security tools and techniques for threat detection, anomaly identification, and risk assessment.

Mandatory Skills and Qualifications

• 5+ years of relevant experience in DevSecOps, DevOps with a strong security focus, or a related cybersecurity engineering role.
• Production Security: Proven hands-on experience identifying and fixing security vulnerabilities in live production systems handling real user data.
• AWS Security: Practical experience implementing and managing AWS IAM, Security Groups, KMS, and Secrets Manager.
• CI/CD Pipeline Security: Hands-on experience integrating and managing security scanning tools within CI/CD pipelines, rather than only building deployment pipelines.
• Security Compliance: Direct involvement in successfully implementing and preparing an organization for ISO 27001, SOC 2, or PCI-DSS compliance.
• High-Scale Systems: Experience supporting systems handling at least 5,000 concurrent requests.
• Real-Time and Asynchronous Systems: Experience securing or operating real-time applications, event-driven architectures, or asynchronous processing systems.
• CI/CD Tools: Experience with Jenkins, GitLab CI, or GitHub Actions.
• Scripting and Automation: Proficiency in Python, Bash, Shell, or Go.
• Infrastructure and Containers: Hands-on experience with Terraform or CloudFormation, Docker, and Kubernetes.
• Security Tools: Familiarity with tools such as SonarQube, Snyk, OWASP ZAP, HashiCorp Vault, or equivalent security scanning and secrets management solutions.
• AI/ML Security Tools: Experience using AI/ML-based tools for security monitoring, threat detection, or risk analysis.

Preferred Qualifications

• Experience building security automation frameworks and integrating security checks into developer workflows.
• Experience with cloud security monitoring, incident response, and vulnerability remediation at scale.
• Strong problem-solving, communication, and cross-functional collaboration skills.