Senior DevSecOps and Cloud Security Engineer

Catalyic Security; Lahore; On-site; PKR 300,000 - 600,000; Full time

Job summary

Catalyic Security is seeking a Senior DevSecOps and Cloud Security Engineer to secure CI/CD pipelines, cloud infrastructure, and deployments for clients. You will identify risks across the software delivery lifecycle, automate security checks, and work with engineering teams to scale fixes.

Responsibilities include designing secure pipelines, hardening cloud environments (AWS/Azure/GCP), integrating automated security testing, and guiding teams on secure deployment practices.

Qualifications

• 5+ years of experience in DevSecOps, cloud security, or related roles.
• Hands-on experience with at least one major cloud platform (AWS, Azure, or GCP).
• Strong knowledge of CI/CD tools such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.
• Experience with Docker, Kubernetes, and container security.
• Scripting and automation skills (Python, Bash, or similar).
• Strong documentation and communication skills.
• Ability to work independently and manage multiple projects.

Responsibilities

• Design and secure CI/CD pipelines from code commit to production deployment.
• Assess and harden cloud environments (AWS, Azure, GCP) including IAM, container security, and IaC.
• Integrate automated security testing (SAST, DAST, SCA, secrets scanning) into build pipelines.
• Identify misconfigurations, vulnerabilities, and risks across cloud workloads.
• Implement and validate remediation with development and operations teams.
• Build and maintain security guardrails, policies, and monitoring.
• Guide teams on secure deployment practices and DevSecOps adoption.

Skills

DevSecOps

Cloud security

CI/CD

AWS/Azure/GCP

Docker & Kubernetes

Python/Bash

Documentation & communication

Independent multi-projects

Education

Bachelor's degree in Cyber Security, Computer Science, IT

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Terraform

CloudFormation

Job description

The Senior DevSecOps and Cloud Security Engineer will secure CI/CD pipelines, cloud infrastructure, and deployments for Catalyic Security's clients. You will identify risks across the software delivery lifecycle, automate security checks, and work closely with engineering teams to implement fixes that scale.

Key Responsibilities

• Design and secure CI/CD pipelines from code commit to production deployment
• Assess and harden cloud environments, including:
  • AWS, Azure, and GCP configurations
  • Identity and access management (IAM)
  • Container and Kubernetes security
  • Infrastructure as Code (Terraform, CloudFormation)
• Integrate automated security testing (SAST, DAST, SCA, secrets scanning) into build pipelines
• Identify misconfigurations, vulnerabilities, and risks across cloud workloads
• Implement and validate remediation in collaboration with development and operations teams
• Build and maintain security guardrails, policies, and monitoring
• Guide teams on secure deployment practices and DevSecOps adoption

Required Skills & Experience

• 5+ years of experience in DevSecOps, cloud security, or related roles
• Hands-on experience with at least one major cloud platform (AWS, Azure, or GCP)
• Strong knowledge of CI/CD tools such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps
• Experience with Docker, Kubernetes, and container security
• Scripting and automation skills (Python, Bash, or similar)
• Strong documentation and communication skills
• Ability to work independently and manage multiple projects

Education & Certifications (Preferred)

• Bachelor's degree in Cyber Security, Computer Science, IT, or a related field
• Relevant certifications preferred, based on the environment:
  • AWS Certified Security Specialty
  • CARTP (Certified Azure Red Team Professional)
  • CKS (Certified Kubernetes Security Specialist)
  • CDP (Certified DevSecOps Professional)