Sr DevSecOps Engineer (CI/CD & Jenkins)

Job Summary

We are looking for a DevSecOps Engineer to build and manage secure CI/CD pipelines, automate DevOps processes, and integrate security across the SDLC. The role requires hands-on experience with Jenkins, security tools, Infrastructure as Code, containers, and AWS, Azure, or GCP.

Key Responsibilities

• Build and manage Jenkins-based CI/CD pipelines.
• Integrate SAST, SCA, DAST, container, and IaC security scanning into CI/CD.
• Implement security gates, vulnerability management, and remediation processes.
• Manage cloud infrastructure and security on AWS, Azure, or GCP.
• Automate deployments using Terraform and other IaC tools.
• Manage Docker/Kubernetes environments and container security.
• Implement IAM, secrets management, encryption, logging, and monitoring.
• Collaborate with development and operations teams to implement secure SDLC practices.

Required Skills

• Strong experience with Jenkins, CI/CD, Git, Groovy, Linux, and scripting.
• Hands-on experience with security tools such as SonarQube, Checkmarx, Snyk, Trivy, OWASP ZAP, Checkov, or equivalent.
• Strong knowledge of AWS/Azure/GCP and cloud security.
• Experience with Terraform, Docker, and Kubernetes.
• Knowledge of OWASP Top 10, vulnerability management, IAM, secrets management, and secure SDLC.
• Experience with Python, Bash, or PowerShell is preferred.
• Familiarity with ISO 27001, SOC 2, PCI DSS, or CIS Benchmarks is an advantage.

Preferred Certifications

AWS/Azure/GCP Security or DevOps, CKA/CKS, CISSP, or Terraform Associate.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.