DevSecOps Engineer — Build Secure Pipelines & Compliance

Level 3 BOS; Karachi Division; On-site; PKR 1,200,000 - 1,800,000; Full time

Job summary

Level 3 BOS in Karachi seeks a Security Engineer focused on preventing vulnerabilities across environments. The role involves integrating security into CI/CD, managing access controls, and supporting compliance audits.

The ideal candidate has 3+ years in DevSecOps, experience with tools like SonarQube and AWS Key Vault, and strong knowledge of security frameworks. Join us to contribute to secure software development practices.

Qualifications

• 3+ years in DevSecOps, DevOps, or Security Engineering.
• Experience with compliance frameworks like NIST, SOC2, or ISO 27001.
• Scripting skills in Python, PowerShell, or Bash.

Responsibilities

• Integrate SAST/SCA/DAST tools into CI/CD pipelines.
• Build secure pipelines in DevOps, GitHub, or GitLab.
• Enforce MFA, RBAC, and quarterly access reviews for all accounts.
• Prepare audit evidence and monthly security reports.

Skills

DevSecOps

.NET

SharePoint

SQL Server

Python security

SAST/SCA tools

CI/CD

Secrets management

Education

Certifications: DevSecOps Professional, CISSP, CEH, Security+, AWS Security Engineer

Tools

SonarQube

Snyk

Bandit

AWS Key Vault

HashiCorp Vault

Job description

Level 3 BOS in Karachi seeks a Security Engineer focused on preventing vulnerabilities across environments. The role involves integrating security into CI/CD, managing access controls, and supporting compliance audits.

The ideal candidate has 3+ years in DevSecOps, experience with tools like SonarQube and AWS Key Vault, and strong knowledge of security frameworks. Join us to contribute to secure software development practices.