Senior DevSecOps Engineer
New
A
Amex GBTCorporate travel
Source API remote eligibility restrictions: IndiaFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of professional software development experience; 3+ years of hands-on DevSecOps or Security Engineering experience
- Required Skills
- AWSDockerPythonKubernetesCI/CDTerraform
Requirements
- Have 5+ years of professional software development experience and demonstrable expertise in at least one major programming language, such as Python, Go, Java, or JavaScript/TypeScript.
- Have 3+ years of hands-on DevSecOps or Security Engineering experience.
- Have strong knowledge of OWASP.
- Have strong cloud security expertise with at least one major cloud provider: AWS, Azure, or GCP.
- Have strong knowledge of API security and associated tools such as Salt, Akamai, or Cloudflare.
- Understand cloud-native security, including IAM, network security, encryption, secrets management, and compliance frameworks.
- Be proficient with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, or CircleCI.
- Have experience with infrastructure as code tools such as Terraform, CloudFormation, or Ansible.
- Have practical experience with containerization and orchestration technologies such as Docker, Kubernetes, or ECS.
- Understand network security, authentication protocols, and secure API design.
- Experience in the travel, hospitality, or e-commerce industry is listed.
- Additional listed experience includes multi-cloud environments, security certifications, penetration testing or red team operations, threat modeling, risk assessment, and MLSecOps.
Responsibilities
- Work with DevOps teams to design, implement, and maintain secure CI/CD pipelines with security testing throughout the software development lifecycle.
- Implement automated SAST, DAST, SCA, and container security scanning.
- Deploy and support API security tools.
- Ensure security tools consistently report to the aggregator.
- Collaborate with development teams to promote secure coding practices and provide security guidance.
- Ensure compliance with industry standards relevant to the travel industry, including PCI-DSS, GDPR, and SOC 2.
- Mentor junior engineers and promote a security-first culture across engineering teams.
View Full Description & ApplyYou'll be redirected to the employer's site
