Devsecops Engineer

Role & responsibilities

Technical Skills Must Have

• Hands-on expertise with a continuous integration system (for example, TeamCity) and a continuous delivery system (for example, Octopus Deploy), including reusable templates and quality gates.
  
• Proficiency with modern Git workflows (for example, Bitbucket), including branching strategy, protection rules, and code-owner boundaries.
  
• Strong background in Amazon Web Services application delivery (compute, containers, networking, identity and access management) and infrastructure as code (for example, CloudFormation or Terraform).
  
• Experience integrating code and dependency scanning into pipelines using a commercial or open-source platform (for example, Veracode) with policy enforcement and developer remediation loops.
  
• Experience operating external attack-surface and vendor-risk monitoring with a platform such as UpGuard, with documented remediation and governance.
  
• Experience running dynamic application security testing with a platform such as Invicti and incorporating results into release gates.
  
• Security fundamentals: secrets management, least-privilege access, dependency and image scanning, baseline hardening.
  
• Scripting and automation (for example, Python, Bash, or PowerShell) for pipelines, environment management, diagnostics, and reporting.
  
• Containerization fundamentals (Docker and Kubernetes) and image policy management.
  

Technical Skills – Good to Have

• Observability stacks (for example, CloudWatch, Prometheus, Elasticsearch/Logstash/Kibana, Datadog) and cost monitoring.
  
• Experience in compliance-sensitive environments and change-management processes.
  
• Policy-as-code, software bill of materials workflows, and supply-chain hardening (signing and provenance).
  
• Multi-account landing zones and migration experience on Amazon Web Services.
  

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering, or related field (or equivalent experience).
  
• Ten or more years in DevOps, DevSecOps, or Site Reliability Engineering with ownership of cross-functional delivery initiatives.
  
• Proven leadership scaling teams and practices—hiring, coaching, standards, budgeting, and governance.
  
• Demonstrated success improving delivery, reliability, and security metrics and driving predictable releases.
  
• Excellent stakeholder management and communication; crisp decision logs and status updates.
  
• Willingness to participate in and lead on-call and incident-commander rotations.