Senior DevSecOps Engineer - Azure Cloud & Hybrid Security

Aras Kargo; Fatih; Hybrid; TRY 400,000 - 700,000; Full time

Benefits offered by this job

Hybrid working model

Flexible working hours

Early finish on Fridays

Taxi transportation for Headquarters

Birthday leave

30 days paternity leave

Meal card

Supplementary health insurance

Life insurance

Personal accident insurance

English language training

Postgraduate education support

Job summary

Aras Kargo seeks a Senior DevSecOps Engineer with 5+ years of experience specializing in security automation, Azure Cloud, and hybrid (On-Premise) environments. You will drive integration of SAST/DAST/SCA into CI/CD, secure Kubernetes ecosystems, and lead ISO 27001 / NIS2 compliance programs.

Collaborate with Security Assurance and Information Security teams to improve missing controls, automate testing, and enable governance across development and operations.

Qualifications

• 5+ years in security automation, DevSecOps, and secure SDLC.
• Expertise with SAST/DAST/SCA/CS and CI/CD tools.
• Experience with Kubernetes, containers, and cloud security.
• IaC: Terraform, Ansible.
• Linux system administration.
• Certs preferred: CISSP, CISM, OSCP, CEH.
• Azure Cloud and on-premise infrastructure experience.
• English proficiency.
• ISO 27k familiarity and NIS2 knowledge.
• Experience with SIEM/XDR/SOAR tools.

Responsibilities

• Define and implement security controls within the SDLC in collaboration with Dev, DevOps, and Sec teams.
• Manage security tools integrated into CI/CD pipelines (SAST/DAST/SCA/CS); plan for unintegrated tools.
• Design and maintain processes to detect, validate, and report app security vulnerabilities.
• Secure deployment of apps in container, Kubernetes, and cloud environments.
• Monitor global security incidents and implement preventive measures.
• Collaborate with Security Assurance and IS teams to improve controls.

Skills

Security automation

CI/CD integration

Kubernetes

Azure Cloud

English proficiency

Analytical thinking

Governance and compliance

Tools

SAST

DAST

SCA

Container Security

Jenkins

GitHub

Job description

Aras Kargo seeks a Senior DevSecOps Engineer with 5+ years of experience specializing in security automation, Azure Cloud, and hybrid (On-Premise) environments. You will drive integration of SAST/DAST/SCA into CI/CD, secure Kubernetes ecosystems, and lead ISO 27001 / NIS2 compliance programs.

Collaborate with Security Assurance and Information Security teams to improve missing controls, automate testing, and enable governance across development and operations.