We are looking for a passionate and skilled DevSecOps Engineer to join our technical team. In this role, you will be responsible for integrating security practices into our CI/CD pipelines, hardening our infrastructure, and ensuring our deployment environments are secure by design.

Special Note: Are you currently a strong DevOps Engineer looking to transition fully into the security and DevSecOps domain? We highly encourage you to apply. We value strong infrastructure skills and will support your growth in security.

Key Responsibilities:

• Design, implement, and maintain secure CI/CD pipelines.
• Perform deep OS-level and container-level hardening.
• Automate security controls, vulnerability scanning, and compliance checks.
• Collaborate with the development and operation teams to promote a "Shift-Left" security culture.
• Monitor and respond to security incidents within the infrastructure.

Must-Have Qualifications (The Essentials):

• Advanced Linux Administration: Expert-level knowledge of Linux operating systems.
• Linux Hardening: Deep understanding and hands-on experience in Linux OS hardening (e.g., CIS benchmarks, PAM configuration, SELinux/AppArmor, kernel tuning).
• Containerization & Security: Expert knowledge of Docker and Docker Compose, with a strong focus on container security, image scanning, and Docker hardening.
• CI/CD & Automation: Strong proficiency in building and maintaining CI/CD pipelines (e.g., GitLab CI, Jenkins) and expert-level skills in Configuration Management tools, specifically Ansible.
• Security Mindset: Good understanding of network security, IAM, and common vulnerabilities (e.g., OWASP Top 10).
• Scripting: Proficiency in writing automation scripts (Bash, Python, Go, etc.).

Nice-to-Have (Bonus Points):

• Familiarity with integrating SAST, DAST, and SCA tools (e.g., SonarQube, Trivy, Clair) into pipelines.
• Knowledge of Infrastructure as Code (IaC) security (e.g., scanning Terraform or Ansible scripts).
• Previous experience in a standard DevOps role.