Job Description:

• Integrate security practices into DevOps pipelines to ensure secure software development and deployment.
• Collaborate with development, operations, and security teams to identify, assess, and mitigate security risks.
• Automate security testing (SAST, DAST, and dependency scanning) within CI/CD workflows.
• Implement and manage secrets management systems and secure configuration storage.
• Continuously monitor and improve the organization’s security posture through proactive risk assessment.
• Develop and maintain secure infrastructure as code (IaC).
• Ensure compliance with organizational and industry security standards (ISO 27001, NIST, OWASP, etc.)
• Support incident response, vulnerability management, and remediation efforts.
• Conduct threat modeling and implement runtime security controls for cloud and containerized environments.

Requirements:

• Strong understanding of security in CI/CD pipelines and cloud environments.
• Hands-on experience with container security tools.
• Familiarity with vulnerability management tools (e.g., Nessus, Qualys, OpenVAS).
• Experience with secret management tools (Vault, etc.).
• Proficiency in scripting and automation (Python, Bash, PowerShell).
• Knowledge of compliance frameworks and secure coding practices.
• Familiarity with monitoring and SIEM tools ( ELK).
• Understanding of network and application security fundamentals.