DevSecOps Engineer

Job summary

Seeking a Senior DevSecOps Engineer to join an Application Security team. This role requires a strong developer background with Java or Python and deep security expertise, bridging the gap between development and security practices. The ideal candidate will integrate security tools into CI/CD pipelines and guide remediation efforts.

Qualifications

• Strong developer background with Java or Python
• Ability to code and communicate like a developer
• Solid grasp of application security concepts including OWASP Top 10, vulnerability analysis, and remediation guidance
• Experience integrating security tools into CI/CD pipelines
• Experience working with developers to close findings
• Exposure to SAST, SCA, DAST, API, and mobile security assessments
• Familiarity with GitHub, Jira, and Jenkins
• Experience with cloud security concepts and REST/SOAP API
• Strong communication skills to explain risks and guide remediation
• Hands-on experience with Checkmarx, Sonatype Nexus IQ, Black Duck, or Noname API Security (nice to have)
• Knowledge of Docker, Kubernetes, AWS, and Azure (nice to have)

Responsibilities

• Strengthen the client's Application Security team
• Act as a critical bridge between developers and security practices
• Integrate security tools into CI/CD pipelines
• Work with developers to close findings
• Explain risks and guide remediation

Skills

Certifications

Languages

Relocation