Job Summary:
We are looking for experienced DevSecOps Engineers to integrate security practices into every stage of the software development and deployment lifecycle. This role plays a critical part in designing secure, scalable, and automated infrastructure within a cloud-native banking and fintech environment. The role ensures systems are resilient, compliant, and aligned with industry best practices for CI/CD, containerization, and infrastructure as code (IaC).
The ideal candidate has a strong foundation in DevOps principles with hands-on experience embedding security across cloud platforms, pipelines, and production environments.
Key Responsibilities:
- Implement security automation tools and frameworks within CI/CD pipelines and cloud infrastructure environments.
- Collaborate with development, QA, and cybersecurity teams to ensure secure application delivery across environments.
- Identify, assess, and remediate vulnerabilities in containers, dependencies, and cloud configurations.
- Develop and maintain Infrastructure as Code (IaC) scripts using tools like Terraform, Ansible, or CloudFormation.
- Support secure deployment and orchestration using Kubernetes, Docker, and serverless technologies.
- Monitor and improve cloud security posture using tools such as AWS Config, Azure Security Center, or GCP Security Command Center.
- Assist in security audits, incident response, and the implementation of best practices across development and operations.
- Create technical documentation and share knowledge through security-focused enablement within engineering teams.
Qualifications:
- Bachelors degree in Computer Science, Information Security, or a related field.
- 3-5 years of hands-on experience in DevOps or Cloud Engineering, with at least 2 years focused on DevSecOps or secure DevOps practices.
- Proficiency with CI/CD tools (e.g., Jenkins, GitLab CI, Azure DevOps) and IaC frameworks (e.g., Terraform, Ansible).
- Strong knowledge of container security, secrets management, and automated scanning tools (e.g., Aqua, Prisma Cloud, Snyk).
- Familiarity with cloud platforms (AWS, Azure, or GCP) and cloud security principles.
- Experience implementing or supporting compliance frameworks (e.g., PCI-DSS, ISO 27001, NIST) is a plus.
- Security certifications (e.g., GIAC, CEH, AWS Security Specialty, DevSecOps Foundation) are advantageous.
- Strong scripting and automation skills (Bash, Python, PowerShell, etc.).