Job Description:

We are looking for a passionate and skilled DevSecOps Engineer with 2+ years of experience in DevOps and cloud security practices. The ideal candidate should have hands-on experience in implementing security across CI/CD pipelines, cloud infrastructure, containerized environments, and application deployments. The role involves integrating security into every stage of the software development lifecycle (SDLC) while ensuring scalable, reliable, and secure deployments.

Key Responsibilities:

- Implement and maintain secure CI/CD pipelines.

- Integrate security controls into DevOps processes and workflows.

- Perform vulnerability assessments and security scans on applications, containers, and infrastructure.

- Automate security testing within build and deployment pipelines.

- Monitor cloud environments and ensure adherence to security best practices.

- Collaborate with Development, QA, and Infrastructure teams to remediate security vulnerabilities.

- Configure and manage IAM policies, access controls, and secrets management.

- Support compliance initiatives and security audits.

- Monitor, investigate, and respond to security incidents.

- Implement Infrastructure as Code (IaC) security best practices.

- Ensure secure containerization and Kubernetes deployments.

Required Skills:

- AWS/Azure/GCP, CI/CD (Jenkins, GitHub Actions, GitLab CI/CD), Docker, Kubernetes, Linux Administration, Shell Scripting, Application Security (AppSec), Vulnerability Management, OWASP Top 10, Security Testing (SAST/DAST), Container Security, Cloud Security, Identity & Access Management (IAM), Secrets Management, Terraform, CloudFormation (Good to Have), SonarQube, Snyk, Trivy, OWASP ZAP, Checkmarx, Veracode, Aqua Security, Prisma Cloud, ELK Stack, Grafana, Prometheus, CloudWatch.

Mandatory Skills:

- DevSecOps, AWS, Azure, GCP, Jenkins, GitHub Actions, GitLab CI/CD, Docker, Kubernetes, Terraform, SonarQube, Snyk, Trivy, OWASP, IAM, Cloud Security, Container Security, Linux, CI/CD, Vulnerability Management.