Job Opportunities

Senior DevSecOps Engineer

About the Job
Build security into the software delivery lifecycle for cloud and Kubernetes workloads. Work with engineering, platform, and security teams to automate security checks, reduce exposure in production, and resolve vulnerabilities without disrupting releases.
What you’ll do
• Integrate and tune code, dependency, secrets, container, and infrastructure-as-code scans in CI/CD pipelines. Define when findings should block a release and document exceptions.
• Harden cloud and Kubernetes environments through least-privilege access, workload and network policies, secure configuration, and secrets management.
• Strengthen software supply chain controls through trusted build images, software bills of materials (SBOMs), and artifact signing and verification.
• Triage vulnerabilities by severity, exploitability, and exposure. Work with engineering teams to prioritize fixes and verify remediation.
• Maintain security policies as code and automate recurring compliance checks and evidence collection.
• Investigate security alerts and support incident containment, recovery, and follow-up actions.
What you’ll need
• Hands-on experience securing production cloud environments and CI/CD pipelines, including ownership of security controls from rollout through remediation.
• Strong experience with Linux, Docker, Kubernetes, and at least one major cloud platform such as AWS, Azure, or Google Cloud.
• Experience implementing automated security checks in Jenkins, GitHub Actions, GitLab CI, Azure DevOps, or a comparable platform.
• Experience securing infrastructure as code with Terraform or equivalent tooling and automating workflows with Python or Bash.
• Practical knowledge of IAM, secrets management, container hardening, vulnerability management, and incident response.