About the role
We are looking for a security-focused DevSecOps Engineer with 1-2 years of experience to help embed security across the software development lifecycle while maintaining deployment speed, platform reliability, and compliance.
This role will work closely with engineering, infrastructure, and security teams to strengthen CI/CD security, cloud governance, infrastructure automation, vulnerability management, monitoring, and secure deployment practices.
Roles and Responsibilities
Secure DevOps & CI/CD
- Build, maintain, and optimize secure CI/CD pipelines for reliability, speed, and controlled releases.
- Implement shift-left security by integrating security checks early in the development lifecycle.
- Configure automated quality, vulnerability, and security gates within release pipelines.
- Support secure, zero-downtime deployment strategies and rollback mechanisms.
- Ensure release workflows follow secure SDLC and change-management practices.
Cloud and Infrastructure Security
- Manage and secure cloud environments across AWS, GCP, or Azure.
- Develop and maintain Infrastructure-as-Code using Terraform.
- Package and deploy applications to Kubernetes using Helm.
- Implement cloud security controls, including IAM policies, least-privilege access, network segmentation, and secure configuration management.
- Strengthen Docker and Kubernetes security, including image hardening, access controls, and workload protection.
Application and Platform Security
- Integrate SAST, DAST, SCA, container scanning, and vulnerability assessment tools into CI/CD pipelines.
- Track vulnerabilities, coordinate remediation, and ensure closure within defined timelines.
- Implement secure secrets management, certificate management, and encryption practices.
