DevSecOps Engineer

About the role

We are looking for a DevSecOps professional to embed security throughout the software development lifecycle and CI/CD pipelines. The role focuses on improving application, cloud, and infrastructure security by implementing automated security controls, vulnerability management processes, and secure deployment practices, primarily within AWS environments.

Key responsibilities

• Integrate security into the SDLC, CI/CD pipelines, and release processes.

• Conduct threat modelling and security reviews for applications and platforms.

• Implement security tools such as SAST, DAST, SCA, secrets scanning, container scanning, and IaC scanning.

• Manage vulnerability remediation, security findings, and risk exceptions.

• Secure AWS cloud environments, containers, serverless applications, and infrastructure-as-code platforms (Terraform, CloudFormation, Ansible).

• Enhance software supply chain security, including dependency management, SBOMs, and artifact integrity.

• Implement secure identity, access, and secrets management practices.

• Support security monitoring, incident response, compliance reviews, and audit requirements.

• Collaborate with development, infrastructure, security, and compliance teams to drive a security-first culture.

About you

• Bachelor's Degree in Computer Science, Cybersecurity, IT, or related field.

• Minimum 3 years of experience in DevSecOps, Application Security, Cloud Security, or Secure CI/CD environments.

• Strong knowledge of AWS security, DevSecOps practices, secure SDLC, and vulnerability management.

• Hands-on experience with GitLab, GitHub, Bitbucket, Terraform, Docker, and cloud security controls.

• Familiarity with security frameworks such as OWASP, ISO 27001, NIST, CIS Benchmarks, and BNM RMiT.

• Scripting and automation skills using Python, Bash, or PowerShell.