DevSecOps Engineer - Application Security

Job Description:

We are looking for a DevSecOps Engineer to strengthen application security across our SaaS platform. This is a senior individual contributor role responsible for designing, implementing, and continuously improving DevSecOps practices across engineering teams and business units.

Key Responsibilities:

- Design and implement DevSecOps practices across software development and CI/CD pipelines.

- Integrate application security controls and automated security testing into CI/CD workflows.

- Identify and address application security vulnerabilities across the software development lifecycle.

- Implement security scanning for source code, dependencies, containers, and other application components.

- Work with engineering teams to improve secure coding practices and vulnerability remediation.

- Establish and monitor security standards based on OWASP and industry best practices.

- Support Azure DevOps environments and integrate security tools into development workflows.

- Drive continuous improvement of application security processes, controls, and DevSecOps maturity.

Required Candidate Profile:

- Hands-on experience in DevSecOps and Application Security.

- Strong understanding of secure SDLC and CI/CD security practices.

- Experience with security testing and vulnerability management.

- Good knowledge of OWASP application security principles.

- Experience with Azure DevOps and CI/CD pipelines.

- Understanding of cloud and SaaS security concepts.

- Strong problem-solving and communication skills.