Cloud Security DevSecOps Engineer | AWS & API Security

NETSOL Technologies Inc.; Lahore; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

NETSOL Technologies in Lahore seeks a Cloud Security / DevSecOps Engineer to secure NETSOL’s AWS cloud infrastructure and applications. You will collaborate with development, DevOps and engineering teams to embed security across the SDLC and cloud environments.

The role focuses on hands-on design, implementation and operation of security controls, API and container security, IAM governance, and ongoing threat mitigation. A strong 5–6 year security background is required.

Qualifications

• Bachelor's degree in Information Security, Computer Science or related field.
• 5–6 years in information security with 3–4 years securing cloud environments (AWS preferred).
• Experience collaborating with Developers, DevOps and Engineering teams.
• Knowledge of ISO, NIST, CIS and GDPR.

Responsibilities

• Provide hands-on security design, implementation and evaluation for AWS cloud infrastructure.
• Design and support secure AWS solutions following industry best practices.
• Implement and manage cloud security tools (Snyk, Sysdig, AWS Security Hub, WAF, Shield).
• Embed security into the CI/CD pipeline and SDLC within the DevSecOps model.
• Gate API, container, Kubernetes security and overall cloud workload protection.
• Develop IAM policies, access controls and security group configurations.

Skills

AWS

Cloud Security

DevSecOps

IAM

Security Audits

CI/CD

Team Collaboration

Education

Bachelor's degree in Information Security/Computer Science

Tools

Snyk

Sysdig

AWS Security Hub

WAF

AWS Shield

Kubernetes Security

Job description

NETSOL Technologies in Lahore seeks a Cloud Security / DevSecOps Engineer to secure NETSOL’s AWS cloud infrastructure and applications. You will collaborate with development, DevOps and engineering teams to embed security across the SDLC and cloud environments.

The role focuses on hands-on design, implementation and operation of security controls, API and container security, IAM governance, and ongoing threat mitigation. A strong 5–6 year security background is required.