Senior DevSecOps Engineer

Primary responsibilities / Key result areas

• Integrate Security across the SDLC
  • Incorporate security considerations and testing at the very beginning of the software development life cycle.
  • Implement secure coding methods to prevent vulnerabilities from being introduced into the software or IaC code
  • Integrate and automate security tools for continuous vulnerability scanning, threat modelling, and compliance checks within the CI/CD pipeline
• Collaboration & Culture
  • Work with development, operations and cybersecurity teams to ensure security is a shared responsibility
  • Promote a security-first mindset by providing training and guidance to all team members on DevSecOps best practices
  • Develop strong communication skills to collaborate effectively with various teams and stakeholders
• Process & Risk Management
  • Conduct comprehensive risk assessments to identify potential threats and develop strategies to mitigate them.
  • Develop and execute plans for responding to security incidents and investigating post-incident issues.
  • Ensure that applications and systems comply with relevant security standards and regulatory requirements.
  • Implement security controls and configurations through code, which allows for automated management and consistent security.
  • Implement continuous security monitoring of infrastructure, networks and applications to detect and respond to threats in real-time.
  • Provide Level2 support for the critical software systems and willing to provide on-call support.

Qualifications & Experience

• Graduated in Computer Science or Software Engineering (Bachelor’s or Master’s Degree level)
• Certified Ethical Hacker or Equivalent
• Certified Cloud Security Engineer or Equivalent
• Minimum 5 years of relevant work experience in DevSecOps
• Hand-on experience on Azure cloud platforms, containerization technologies (e.g., Docker, Kubernetes). Nutanix Kubernetes Platform is highly desired.
• Hands-on experience in deployment and management of production Postgres databases in Kubernetes – CloudNativePG operator
• Strong understanding of the entire Software Development Lifecycle
• Experience with CI/CD tools and patterns
• Knowledge of scripting and programming languages (e.g., Python, Bash)
• Familiarity with infrastructure as code (IaC) tools such as Terraform, Helm, ArgoCD/Flux, Ansible
• Knowledge of the best security practices and principles
• Excellent written and verbal communication skills
• Strong expertise in programming and automations