Cloud DevSecOps Engineer
Posted Updated
Description
Job Title: Cloud DevSecOps Engineer
Contract: 1 year
Job Summary
We are seeking a highly skilled Cloud DevSecOps Engineer to integrate security practices into DevOps workflows across cloud
environments. The ideal candidate will be responsible for implementing security
controls, building secure CI/CD pipelines, managing vulnerabilities, and
ensuring compliance throughout the application and infrastructure lifecycle.
This role requires close collaboration with development, operations, and
security teams to maintain secure and scalable cloud environments.
Key Responsibilities
- Integrate
security practices into DevOps pipelines and software development
lifecycle (SDLC).
- Design,
implement, and maintain secure cloud infrastructure across platforms such
as Amazon Web Services, Microsoft Azure, or Google Cloud.
- Build
and maintain secure CI/CD pipelines using tools such as Jenkins, GitHub
Actions, or GitLab CI/CD.
- Implement
Infrastructure as Code (IaC) using tools like Terraform, AWS
CloudFormation, or similar technologies.
- Conduct
vulnerability assessments and implement remediation strategies.
- Implement
identity and access management (IAM), encryption, and secrets management
best practices.
- Monitor
cloud infrastructure and applications for security threats using
monitoring and logging tools.
- Implement
security testing tools for static, dynamic, and container security
scanning.
- Collaborate
with development and operations teams to embed security into application
development and deployment processes.
Requirements
Preferred Qualifications
- Certifications
such as Certified Cloud Security Professional (CCSP) or Certified
Information Systems Security Professional (CISSP).
- Knowledge
of container security and cloud compliance frameworks.