DevSecOps Engineer

Purelogics Llc; Lahore; On-site; PKR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Annual Paid Leaves

Leave Encashment

Paid Certifications

Health, Life Insurance

Provident Fund

Child Education Program

Referral Bonus Program

Car & Bike Finance Program

Monthly Achievements

Public Holiday & Weekend Compensation

Job summary

PureLogics is seeking a DevSecOps professional in Lahore to design, implement, and secure infrastructure across cloud platforms. You will lead ethical hacking, conduct audits, and integrate security practices into the SDLC, while automating testing and vulnerability assessments.

The candidate will work with cross-functional teams, stay updated on threats, and help maintain compliance with standards such as NIST, CIS, and SOC 2. The role offers growth within a global technology environment.

Qualifications

• Bachelor's degree in CS, Cybersecurity, Information Security, or related field.
• 2+ years in DevSecOps or security engineering.
• Hands-on experience in penetration testing and security automation.

Responsibilities

• Implement security in CI/CD pipelines and automate testing.
• Design and manage secure infrastructure with IaC.
• Lead ethical hacking, penetration testing, and security audits.
• Perform penetration testing on apps, networks, and cloud.
• Develop security regression testing frameworks.
• Monitor threats and respond using SIEM tools.
• Assist in security audits and compliance (NIST, CIS, ISO 27001, SOC 2).
• Collaborate with developers to embed security in SDLC.
• Stay updated on threats and industry trends.

Skills

Cloud platforms

Containerization

CI/CD security

IaC tools

Ethical hacking

Penetration testing

Security automation

SIEM

Threat modeling

SDLC security

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field

Tools

Burp Suite

Metasploit

Nmap

Kali Linux

Splunk

ELK

AWS Security Hub

Terraform

CloudFormation

Ansible

Job description

Job Description:

• Knowledge of cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes, OpenShift).
• Implement security tools and best practices within CI/CD pipelines to automate security testing, vulnerability assessments, and ethical hacking.
• Design, deploy, and manage secure infrastructure using Infrastructure as Code (IaC) principles and tools like Terraform, CloudFormation, or Ansible.
• Lead and perform ethical hacking, penetration testing, and security audits to identify vulnerabilities, assess risks, and recommend mitigation strategies.
• Conduct penetration testing on applications, networks, and cloud environments using tools like Burp Suite, Metasploit, Nmap, and Kali Linux.
• Develop, maintain, and enhance security-focused regression testing frameworks to proactively identify and address security vulnerabilities.
• Monitor and respond to security threats, perform regular security assessments, and implement remediation strategies using SIEM tools like Splunk, ELK, or AWS Security Hub.
• Participate in incident response and post-incident analysis, contributing to continuous improvement and learning.
• Collaborate with cross-functional teams to define and implement best practices for secure DevOps processes.
• Ensure adherence to security compliance frameworks (e.g., NIST, CIS, ISO 27001, SOC 2) and assist in security audits.
• Implement security hardening techniques for applications, networks, and infrastructure.
• Develop and enforce security policies for secrets management, identity & access management (IAM), and role-based access control (RBAC).
• Automate security scanning, configuration management, and patch management processes.
• Conduct threat modeling and risk assessment to improve security posture.
• Work with developers to integrate security best practices into the software development lifecycle (SDLC).
• Stay updated with the latest security threats, vulnerabilities, and industry trends.

Required Skills:

Required Qualification:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.

Experience:

• Minimum 2 years of experience in DevSecOps, Security Engineering, or a related field.
• Hands-on experience in penetration testing, ethical hacking, and security automation.

About Us:

PureLogics is a full services technology company with having presence in the USA, UAE, and in Lahore. Over the past 18+ years, we have matured from a narrowly-focused five-person team to a well-established technology hub with around employees. We’re CMMI Level 2 and ISO Certified company and highly acclaimed AWS consulting partners.

The success of our business mainly lies in building a team of A-players, who work together and build together, and who crave perfection in everything they produce for our elite clients. We offer the opportunity to young and enthusiastic individuals that are eager to take on tough challenges under our mentorship toward a bright future.

What are we offering?

• Annual Paid Leaves
• Leave Encashment
• Paid Certifications
• Health, Life Insurance
• Provident Fund
• Child Education Program
• Referral Bonus Program
• Car & Bike Finance Program
• Monthly Achievements
• Public Holiday & Weekend Compensation