DevSecOps Engineer

In this role, you will be key in aligning security goals with infrastructure, R&D and IT requirements. You will be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities.

A day in the life and how you’ll make an impact:

Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools.

Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows.

Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring.

Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats.

Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization.

Work closely with stakeholders (CISO, COO, System Architects, DevOps, IT, Finance, HR, etc’) to identify requirements and prioritize security needs.

Continuously monitor systems and infrastructure for vulnerabilities, intrusions, and misconfiguration.

Perform or manage penetration testing initiatives to identify security weaknesses.

Requirements:

5+ years in security engineering, cloud security, DevSecOps, or security operations roles

Hands-on security experience in AWS and/or GCP, including IAM, VPC networking, firewalls, encryption, and cloud posture management (CSPM)

Experience integrating security into CI/CD pipelines and Infrastructure as Code

Hands-on experience with SIEM (e.g., Splunk, QRadar, Microsoft Sentinel, AWS GuardDuty) and EDR/XDR platforms (e.g., CrowdStrike Falcon, SentinelOne, Microsoft Defender)

Proven experience leading incident response and vulnerability management

Experience performing or managing penetration testing