Senior DevSecOps Engineer

Job summary

As a Senior DevSecOps Engineer, you will deliver secure applications and provide hands-on security support to developers, integrating application security controls within CI/CD pipelines and collaborating with teams to enhance security outcomes.

Qualifications

• Strong knowledge of SAST, DAST, SCA
• Secure coding knowledge
• Hands-on expertise with containers
• Demonstrated experience implementing container security
• Knowledge of Infrastructure as Code
• Solid understanding of information security frameworks

Responsibilities

• Integrate and operate application security controls within CI/CD pipelines
• Support secure SDLC practices
• Assist with threat modelling and secure design reviews
• Support developers in vulnerability triage and remediation
• Tune security tools to reduce false positives
• Support audit, compliance, and evidence generation activities
• Participate in security incident investigation
• Define and document DevSec security standards
• Provide evidence and control mappings for audits
• Identify and track DevSec-related risks

Skills

Relocation