DevSecOps Engineer

- Strong understanding of Secure Software Development Lifecycle (SDLC) and application security principles - Proficiency in threat modeling, secure code reviews, and risk assessment methodologies - Experience with SAST, DAST, and SCA tools, along with the capability to interpret results for development teams - Knowledge of secure coding standards and ability to foster a security-first culture in development - Familiarity with building and maintaining CI/CD pipelines using tools like GitHub Actions, GitLab CI, Jenkins, and Azure DevOps - Skills in automating security scanning and policy enforcement within CI/CD workflows - Expertise in Infrastructure as Code (IaC) security practices utilizing Terraform, CloudFormation, ARM, or Pulumi - Understanding of cloud security best practices across major platforms such as AWS, Azure, and Google Cloud - Experience deploying and managing cloud-native security tools - Knowledge of container security practices and Kubernetes hardening controls - Proficiency in developing automated scripts/playbooks using Python, Bash, or PowerShell - Familiarity with SIEM/SOAR integrations and vulnerability management workflows - Understanding of compliance frameworks such as NIST, ISO 27001, SOC 2, and PCI-DSS - Experience in producing compliance documentation and reporting and implementing policy-as-code solutions