Staff DevSecOps Engineer

View full description

Requirements:

• Minimum of 5+ years of experience in DevSecOps, DevOps, or related field with a focus on security.
• Experience with AWS or deep knowledge in GCP or Azure.
• Proficiency with CI/CD tools such as Github Actions, Jenkins, GitLab CI, or CircleCI.
• Hands-on experience with Kubernetes and securing production clusters.
• Proficiency with infrastructure as code (IaC) tools like Terraform, OpenTofu, or CloudFormation.
• Strong programming skills in Python and shell scripting.
• Knowledge of security best practices including secure coding and access control.
• Excellent problem-solving and communication skills.

Responsibilities:

• Collaborate with development, operations, and security teams to integrate security into the CI/CD pipeline.
• Design, implement, and maintain security automation tools and processes.
• Develop and enforce security policies for cloud and on-premises infrastructure.
• Monitor security vulnerabilities and incidents, providing timely remediation.
• Perform regular security assessments including code reviews and vulnerability scans.
• Implement security tools like firewalls and endpoint protection.
• Work with development teams on secure coding practices.
• Secure Kubernetes clusters and containerized environments.
• Manage infrastructure as code (IaC) with Terraform or similar.
• Automate security tasks using Python and shell scripting.
• Stay updated on security threats and technologies.
• Participate in incident response and disaster recovery.