Senior DevSecOps Engineer - Cloud Security & PCI

Contour Software Pvt Ltd; Karachi Division; On-site; PKR 3,000,000 - 5,000,000; Full time

Benefits offered by this job

Medical coverage

Provident Fund

Performance-based bonuses

Internet subsidy

Transport allowance

Lunch/Dinner provided

Professional development budget

Job summary

Contour Software recruits a senior DevSecOps Engineer to own the security automation across CI/CD, SAST/DAST, and IaC scanning. You will implement secure coding standards, threat modeling, and platform hardening for AWS/EKS, IAM, key management, and data protection.

Collaboration with compliance teams and incident response planning are key elements. Ideal candidates have 8–10 years of application/cloud security experience, fintech/payments exposure, and strong automation skills in Terraform,

Qualifications

• 8–10 years in application/cloud security or DevSecOps for high-availability platforms (fintech/payments ideal).
• Hands-on DevSecOps program administration experience with Veracode.
• Fluent in Terraform for the AWS Stack.
• Strong CI/CD experience (GitHub Actions preferred) and automation in Python/TypeScript/Bash.
• Solid AWS security fundamentals: IAM, KMS, CloudTrail, Config, Security Hub, GuardDuty, VPC/LBs, WAF/Shield; Kubernetes/EKS hardening experience.
• Familiarity with microservices, event-driven systems, and DDD; ability to read code in TypeScript/Java/Ruby and basic ReactJS patterns.
• Working knowledge of PCI DSS 4.0 control objectives (tokenization/PAN handling, key management, segmentation, logging/retention), plus SOC 2/ISO 27001 concepts.
• Clear communication with engineers and non-technical stakeholders; bias to automate and simplify.

Responsibilities

• Own Security Automation: design, implement, and run the CI/CD security toolchain (SAST, SCA, DAST, container and IaC scanning).
• Embed Security in the SDLCo: create secure-coding standards and review checklists for TS/Node, Java, Ruby, React.
• Platform & Cloud Security (AWS/EKS): harden workloads, IAM least-privilege, key management, network segmentation, WAF/Shield, logging.
• Compliance Automation: map controls and automate evidence for PCI DSS 4.0 (SOC 2/ISO 27001 as needed).
• Penetration Testing & Response: scope tests, plan fix-verification, contribute to incident response playbooks.
• Research & implement AI security tools: AI-assisted triage for SAST/SCA/DAST, anomaly detection.

Skills

DevSecOps mgmt

CI/CD automation

Terraform

AWS security

Kubernetes hardening

TS/Java/Ruby

Security testing

PCI DSS 4.0

Tools

Terraform

Veracode

GitHub Actions

OWASP ZAP/Burp

Job description

Contour Software recruits a senior DevSecOps Engineer to own the security automation across CI/CD, SAST/DAST, and IaC scanning. You will implement secure coding standards, threat modeling, and platform hardening for AWS/EKS, IAM, key management, and data protection.

Collaboration with compliance teams and incident response planning are key elements. Ideal candidates have 8–10 years of application/cloud security experience, fintech/payments exposure, and strong automation skills in Terraform,