Adamsbridge - DevSecOps Engineer - CI/CD Pipeline

Job Description :

As a DevSecOps Engineer focusing on web applications, you will embed security practices and controls across the development lifecycle. You will partner closely with software engineers, DevOps teams, and security stakeholders to build secure, scalable web applications and APIs. Your role will ensure security is integrated into code, pipelines, infrastructure, and deployment workflows.

Key Responsibilities :

- Collaborate with development teams to design and implement secure coding practices, frameworks, and libraries.

- Develop and maintain Infrastructure as Code (IaC) security policies for cloud environments (AWS, Azure, GCP).

- Support secure configuration and deployment of web applications, APIs, containers, and microservices.

- Conduct threat modeling and risk assessments for new applications and features.

- Automate compliance validation against internal and external security standards.

- Monitor security metrics and generate reports on vulnerabilities, risks, and remediation progress.

- Provide technical guidance and training to developers and DevOps teams on secure design and implementation.

- Work with the Blue Team to improve detection and response for web application and API threats.

- Participate in incident response and root cause analysis for security events affecting web applications.

Required Skills :

- Web application architectures and modern development stacks (e.g., Node.js, Python, Java, .NET).

- Secure coding practices and common vulnerabilities (OWASP Top Ten).

- CI/CD pipelines and related tooling (e.g., Jenkins, GitLab, GitHub Actions, Azure DevOps).

Hands-on experience with :

- Static and dynamic security testing tools (e.g., SonarQube, OWASP ZAP, Burp Suite, Snyk).

- Software Composition Analysis (SCA) tools for dependency management.

- Container security and orchestration (Docker, Kubernetes).

Familiarity with :

- Infrastructure as Code (Terraform, CloudFormation, Ansible).

- Secrets management solutions (Vault, AWS Secrets Manager).

- Proficiency in programming languages (Python, Bash, PowerShell).

Preferred Skills :

- Experience implementing security automation workflows in large-scale environments.

- Familiarity with Zero Trust and least privilege design principles.

- Knowledge of API security standards and best practices (OAuth2, OpenID Connect).

- Exposure to compliance frameworks (ISO 27001, SOC 2, PCI-DSS).