DevSecOps Engineer

Yugal Tech Academy; United States; Remote; USD 100,000 - 130,000; Full time

Job summary

A leading technology academy in the United States is seeking a DevSecOps Engineer to bridge the gap between web development, operations, and security. You will design and deploy secure applications, manage CI/CD pipelines, and ensure robust security practices across cloud infrastructure. The ideal candidate has over 3 years of experience in DevOps, with strong skills in web development and network security principles. This role offers opportunities for significant career development in security-focused DevOps.

Qualifications

• Experience with security best practices in cloud infrastructure.
• Familiarity with OWASP Top 10 and secure coding practices.
• Understanding of authentication protocols such as OAuth2, SAML.

Responsibilities

• Design, develop, and deploy secure web applications.
• Build and maintain CI/CD pipelines.
• Integrate automated security testing into the development pipeline.
• Monitor and manage cloud infrastructure security.
• Conduct threat modeling and vulnerability assessments.

Skills

3+ years of experience in DevOps or Site Reliability Engineering

2+ years of hands-on web development experience

Knowledge of network security principles

Experience with Docker and Kubernetes

Scripting skills in Bash, Python

Experience with logging/monitoring tools

Tools

Docker

Kubernetes

Terraform

Ansible

ELK stack

Job description

We are seeking a DevSecOps Engineer to bridge the gap between web development, operations, and security. You will be responsible for developing secure web applications, managing CI/CD pipelines, and implementing robust cloud and network security practices across our infrastructure.

Key Responsibilities:

Design, develop, and deploy secure, scalable web applications using modern frameworks (e.g., React, Node.js, Django).

Build and maintain CI/CD pipelines (GitHub Actions, Jenkins, or GitLab CI).

Integrate automated security testing into the development pipeline (SAST, DAST, SCA).

Monitor cloud infrastructure (AWS/GCP/Azure) and implement security best practices (IAM, VPCs, security groups, etc.).

Conduct regular threat modeling, vulnerability assessments, and penetration testing.

Automate infrastructure using Infrastructure as Code (Terraform, Ansible).

Collaborate with development and IT teams to ensure DevOps and security alignment.

Respond to and investigate incidents involving infrastructure or application compromise.

Required Skills & Experience:

3+ years of experience in DevOps or Site Reliability Engineering.

2+ years of hands-on web development experience.

Solid knowledge of network security principles (e.g., firewalls, IDS/IPS, TLS, VPN).

Experience with Docker and Kubernetes in production environments.

Familiarity with OWASP Top 10 and secure coding practices.

Scripting skills in Bash, Python, or similar languages.

Experience with logging/monitoring tools (ELK stack, Prometheus, Grafana).

Understanding of authentication protocols (OAuth2, SAML, etc.).

Preferred Qualifications:

Certifications: OSCP, CEH, or AWS Security Specialty.

Experience with zero trust security architecture.

Contributions to open-source DevSecOps or security tools.