DevSecOps Engineer

Your key responsibilities will include integrating security tools and practices in CI/CD pipelines to detect and mitigate vulnerabilities. You will be involved in implementing static and dynamic code analysis, vulnerability scanning, and container security checks. Designing and implementing secure infrastructure using cloud services and Infrastructure as Code (IaC) will also be a part of your role. Ensuring that configuration management for servers and cloud environments meets security standards is crucial.

Automation of security testing and monitoring processes to maintain compliance and reduce manual intervention will be a key aspect of your job. Developing and maintaining monitoring systems to detect anomalies and security breaches is essential. Collaborating with cross-functional teams to address security concerns during software development and deployment is another critical responsibility. Providing training and awareness on secure coding practices and DevSecOps tools will also be a part of your role.

In terms of incident management, you will be required to respond to security incidents, conduct root cause analysis, and implement preventive measures. Maintaining and testing incident response plans will be crucial to ensure preparedness. Ensuring that systems adhere to regulatory requirements and industry best practices is essential. Conducting periodic security audits and assessments to maintain compliance will also be part of your responsibilities.

To qualify for this position, you should have a Bachelor's degree in Computer Science, Information Technology, or a related field. Additionally, you should have 2-5 years of experience in DevSecOps, DevOps, or security engineering roles. Proficiency in CI/CD tools like Jenkins, GitLab CI, or Azure DevOps is required. Experience with cloud platforms such as AWS, Azure, GCP, and container technologies like Docker and Kubernetes is essential. Knowledge of scripting languages like Python, Bash, automation tools like Terraform or Ansible, and familiarity with security tools such as SAST, DAST, SIEM, and vulnerability scanners are necessary for this role.,