We are seeking a skilled DevSecOps Engineer to join our team. In this role, you will integrate security practices into our DevOps processes. The candidate will have expertise in CI/CD pipelines, cloud security, infrastructure automation and application security, ensuring that security is embedded throughout the software development lifecycle. As a key member of the IT Operations team, you will be responsible for embedding security into the software delivery process, ensuring that our applications and infrastructure remain secure, automated, and resilient.

Position : DevSecOps Engineer

Required No. : 2

Description 

• Integrate security tools and processes into CI/CD pipelines to identify vulnerabilities early.
• Implement and manage security controls for cloud and containerized environments (AWS, Azure, GCP, Docker,Kubernetes).
• Develop and maintain automated security testing (SAST, DAST, SCA, dependencies and container scanning)
• Set up security logging, monitoring and alerting systems to assist with incident response and future analysis.
• Work closely with development, operations and security parts  to enforce secure coding, deployment, and infrastructure practices.
• Conduct risk assessments and threat modeling for applications and infrastructure.

Job Specification Job Benefits

• Bachelor’s degree in Computer Science or a related field, or equivalent professional certification.
• At least two years of practical, hands-on experience in the field.
• Strong experience with CI/CD tools (Jenkins, GitLab CI, GitHub Actions, Azure DevOps, etc.).
• Knowledge of cloud platforms (AWS, Azure, GCP) and their native security services.
• Hands-on experience with containerization & orchestration (Docker, Kubernetes).
• Proficiency with infrastructure as code (IaC) (Terraform, Ansible, CloudFormation).
• Familiarity with security tools:
  • SAST (e.g.: SonarQube)
  • DAST (e.g.: OWASP ZAP, Burp Suite, Nessus, Metasploit)
  • Dependency scanning (e.g.: Snyk, OWASP ZAP)
  • Container/image scanning (e.g.: Trivy, Anchore)
• Strong knowledge of Linux systems, networking, and security fundamentals.
• Scripting skills (Bash, Python).
• Strong organizational skills with the ability to prioritize and manage multiple tasks efficiently.
• Self-motivated, proactive, and accountable in carrying out responsibilities.
• Strong communication skills.