DevSecOps Engineer

Level 3 BOS; Karachi Division; On-site; PKR 1,200,000 - 1,800,000; Full time

Job summary

Level 3 BOS in Karachi seeks a Security Engineer focused on preventing vulnerabilities across environments. The role involves integrating security into CI/CD, managing access controls, and supporting compliance audits.

The ideal candidate has 3+ years in DevSecOps, experience with tools like SonarQube and AWS Key Vault, and strong knowledge of security frameworks. Join us to contribute to secure software development practices.

Qualifications

• 3+ years in DevSecOps, DevOps, or Security Engineering.
• Experience with compliance frameworks like NIST, SOC2, or ISO 27001.
• Scripting skills in Python, PowerShell, or Bash.

Responsibilities

• Integrate SAST/SCA/DAST tools into CI/CD pipelines.
• Build secure pipelines in DevOps, GitHub, or GitLab.
• Enforce MFA, RBAC, and quarterly access reviews for all accounts.
• Prepare audit evidence and monthly security reports.

Skills

DevSecOps

.NET

SharePoint

SQL Server

Python security

SAST/SCA tools

CI/CD

Secrets management

Education

Certifications: DevSecOps Professional, CISSP, CEH, Security+, AWS Security Engineer

Tools

SonarQube

Snyk

Bandit

AWS Key Vault

HashiCorp Vault

Job description

The role focuses on preventing security vulnerabilities across production, staging, and development environments. The Engineer will integrate security into CI/CD, enforce access controls, manage patching, and support audit compliance.

Required Skill Set and Experience

• 3+ years in DevSecOps, DevOps, or Security Engineering
• Experience with .NET, SharePoint, SQL Server, and Python security
• SAST/SCA tools: SonarQube, Snyk, Bandit, Safety, OWASP Dependency-Check
• CI/CD: DevOps, GitHub or GitLab
• Secrets management: AWS Key Vault or HashiCorp Vault
• Scripting: Python, PowerShell, or Bash
• Compliance frameworks: NIST, SOC2, or ISO 27001

Preferred Qualifications

• Certifications: DevSecOps Professional, CISSP, CEH, Security+, AWS Security Engineer
• Experience with MS SQL Server TDE, RLS, and dynamic data masking
• Experience with SharePoint PnP PowerShell automation

Key Responsibilities

• Integrate SAST/SCA/DAST tools into CI/CD pipelines
• Build secure pipelines (DevOps, GitHub/ GitLab)
• Ensure encrypted backups (AES-256) of SharePoint content databases
• Automate permission audits and external sharing reviews
• Implement TDE (Transparent Data Encryption) for production databases
• Enforce row-level security (RLS) and dynamic data masking
• Automate vulnerability assessments and encrypted Database backups
• Enforce MFA, RBAC, and quarterly access reviews for all accounts
• Maintain environment separation (prod/staging/dev) with no production data in non-prod
• Support CAB change management and enforce blackout windows
• Ensure encrypted backups (AES-256) with quarterly restoration tests
• Track EoSL dates for OS, apps, frameworks, and dependencies
• Prepare audit evidence and monthly security reports