Experience : 4-6 Years

Employment Type : Full-Time

We are looking for a skilled DevOps / Application Security Engineer with strong experience in CI/CD automation, code scanning, and secure development practices. The ideal candidate will play a key role in building and maintaining scalable pipelines while driving shift-left security initiatives across the organization.

Key Responsibilities :

- Evaluate, build, and maintain GitHub Actions pipelines to compile C/C++/Java projects and run CodeQL & Coverity scans (PR gates and scheduled runs).

- Tune CodeQL queries and Coverity rules to reduce false positives and develop custom detections where required.

- Automate triage, reporting, and remediation workflows (PR checks, ticketing systems, dashboards).

- Manage scan infrastructure (runners, containers, cloud), secure CI secrets, and optimize pipeline performance.

- Collaborate with cross-functional teams to promote secure coding practices and enable shift-left strategies.

- Develop documentation, onboarding guides, and best practices for engineering teams.

- Troubleshoot CI/CD and analyzer issues and transition stable processes to platform teams.

Must-Have Skills :

- Strong hands-on experience with C++ (modern) debugging.

- Proven experience with CodeQL (mandatory) and/or Coverity in production environments.

- Deep expertise in GitHub Actions or similar CI/CD tools (GHAS familiarity preferred).

- Proficiency in scripting (Bash / Python).

- Experience with Docker, Kubernetes, and cloud platforms.

- Strong communication skills with the ability to drive cross-team collaboration.

- Self-motivated with a focus on improving security and code quality at an organizational level.

Nice-to-Have Skills :

- Experience writing custom CodeQL queries and Coverity rules.

- Knowledge of enterprise CI optimization (caching, distributed builds).

- Familiarity with observability and monitoring tools.

- Experience with build systems such as Gradle, Make, CMake, Bazel, NMake.

- Knowledge of compilers like GCC, Protoc, Visual Studio CL.