Senior DevSecOps Engineer: Build Security Automation

AGAPI; Dubai; On-site; AED 240,000 - 420,000; Full time

Job summary

AGAPI is seeking an experienced DevSecOps engineer to build the shared automation backbone for security operations and the software development lifecycle. You will automate security workflows and embed security into modern DevOps practices through scalable tooling and platforms.

You will integrate SAST/DAST/SCA, manage security data formats like SARIF/JSON, and work across Terraform, CloudFormation, Dockerfiles and cloud infrastructure to improve pipeline reliability and security operations.

Qualifications

• Minimum 6 years of hands-on DevSecOps experience.
• Strong automation, APIs and internal tooling experience.
• Experience with GitOps principles and modern DevOps practices.
• Practical experience with security testing automation and vulnerability management.

Responsibilities

• Build and maintain CI/CD security automation across multiple platforms (GitHub, GitLab, Jenkins, Azure DevOps).
• Integrate SAST, DAST, SCA and security testing tools (Semgrep, ZAP, Nuclei, Burp).
• Process and normalize findings (SARIF/JSON) and route to DefectDojo/Jira.
• Implement security checks for Terraform, CloudFormation, Dockerfiles and cloud infra.

Skills

Python/Go

CI/CD automation

DevSecOps tooling

Security testing tools

Docker/Kubernetes

Cloud platforms

IaC tooling

Telemetry & logging

SBOMs & CycloneDX

Cross-team collaboration

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Semgrep

ZAP

Nuclei

Burp

SARIF/JSON

DefectDojo

Job description

AGAPI is seeking an experienced DevSecOps engineer to build the shared automation backbone for security operations and the software development lifecycle. You will automate security workflows and embed security into modern DevOps practices through scalable tooling and platforms.

You will integrate SAST/DAST/SCA, manage security data formats like SARIF/JSON, and work across Terraform, CloudFormation, Dockerfiles and cloud infrastructure to improve pipeline reliability and security operations.