DevSecOps Engineer

We are seeking a skilled and proactive DevSecOps Engineer to join our dynamic team. The ideal candidate will be passionate about integrating security seamlessly into our software development lifecycle (SDLC) and fostering a security-first culture. You will be responsible for implementing and managing security tools and practices, conducting threat modeling, and ensuring our applications and infrastructure are robust and resilient against emerging threats. This role requires a strong understanding of Agile methodologies, particularly Scrum, and hands-on experience with various security testing tools and techniques.

The ideal candidate will possess a proven track record of successful collaboration within Agile development teams. Strong communication skills, both written and verbal, are key for this role. The ability to build strong working relationships and navigate diverse cultural contexts is essential.

Requirements

• Proven experience as a DevSecOps Engineer, Security Engineer, or a similar role.
• Strong hands-on experience with SAST tools (e.g., SonarQube, Semgrep) and DAST tools (Burp Suite, Acunetix).
• Proficiency in Software Composition Analysis (SCA) tools (Dependency-Track).
• Demonstrable experience in developing and implementing security hardening guides for various technologies.
• Solid understanding and practical application of threat modeling methodologies, particularly STRIDE analysis.
• Experience working in an Agile / Scrum environment and integrating security into agile workflows.
• Familiarity with CI / CD tools (e.g., Jenkins, GitLab CI, AWS DevOps, GitHub Actions).
• Experience with scripting languages for automation.
• Knowledge of cloud security principles and practices ( AWS is a must ; Azure or GCP desirable).
• Understanding of containerization and orchestration technologies (e.g., Docker, Kubernetes) and their security aspects.
• Excellent problem-solving skills and attention to detail.
• Strong communication and interpersonal skills.
• English proficient, both spoken and written

J-18808-Ljbffr