Senior DevSecOps Manager: Cloud Security & IaC Automation

Socium - Teams Done Differently; Pasay; Vor Ort; PHP 1.200.000 - 2.000.000; Vollzeit

Zusammenfassung

Socium - Teams Done Differently is seeking an experienced DevSecOps Manager to integrate security across cloud, infrastructure, and software delivery environments. You will embed security throughout the development lifecycle, automate controls in CI/CD, secure cloud platforms (AWS, Azure, GCP), and enforce IAMRBAC and Zero Trust across Kubernetes.

The role requires hands-on work with IaC security (Terraform, CloudFormation), SAST/DAST/SCA tools, and governance- and compliance-driven practices.

Qualifikationen

• Bachelor's Degree in IT/CS/Engineering/Cybersecurity or related field.
• 5+ years of hands-on Terraform experience.
• At least 1 year of DevSecOps experience.
• Experience with CI/CD security, cloud platforms, and Kubernetes/container environments.

Aufgaben

• Automate security controls within CI/CD pipelines (Jenkins, GitLab, CircleCI, GitHub Actions).
• Secure cloud environments (AWS, Azure, GCP) and container platforms including Docker and Kubernetes.
• Integrate security testing tools (SAST, DAST, SCA) such as Snyk, SonarQube, Checkmarx, Fortify.
• Implement IaC security using Terraform and CloudFormation.
• Enforce IAM best practices, RBAC, and federated identity technologies (SAML, OAuth, Cognito).
• Apply security frameworks (ISO 27001, NIST, CIS) and support compliance automation.
• Conduct threat modeling, risk assessments, and vulnerability management.
• Secure DevOps toolchains, source control systems, and artifact repositories (JFrog, Nexus).
• Implement Zero Trust and cloud-native security controls.
• Maintain audit trails and governance with OPA and AWS Config.
• Strong DevSecOps and Secure SDLC expertise.
• Deep knowledge of cloud and container security.
• Hands-on IaC security and automation experience.
• Kubernetes security knowledge (RBAC, network policies, secrets).
• Proficiency in security tools and automation frameworks.
• Experience with compliance-as-code tools such as Chef InSpec and OpenSCAP.

Kenntnisse

CI/CD security

Cloud security

Security testing tools

IaC security

Terraform

Kubernetes security

RBAC/IAM

Zero Trust

Threat modeling

Security automation

Ausbildung

Bachelor's degree in IT/CS/Engineering/Cybersecurity or related field

Tools

Terraform

CloudFormation

Jenkins

GitHub Actions

Snyk

SonarQube

Checkmarx

Fortify

JFrog

Nexus

AWS

Azure

GCP

OpenSCAP

Chef InSpec

OPA

AWS Config

CircleCI

Kubernetes

Jobbeschreibung

Socium - Teams Done Differently is seeking an experienced DevSecOps Manager to integrate security across cloud, infrastructure, and software delivery environments. You will embed security throughout the development lifecycle, automate controls in CI/CD, secure cloud platforms (AWS, Azure, GCP), and enforce IAMRBAC and Zero Trust across Kubernetes.

The role requires hands-on work with IaC security (Terraform, CloudFormation), SAST/DAST/SCA tools, and governance- and compliance-driven practices.