DevSecOps Engineer
Posted Updated 1
view
Summary
DevSecOps Engineer at Lynxmind embedding security into CI/CD pipelines and infrastructure-as-code workflows: defining secure baselines, threat modeling, automating vulnerability scans, and promoting shared security ownership. Core stack spans CI/CD and DevOps tooling, SAST/DAST and IaC scanning, cloud IAM/networking/encryption, and policy-as-code (OPA, Sentinel, Kyverno).
Responsibilities:
- Integrate security into CI/CD pipelines and IAC workflows
- Define secure-by-default infrastructure baselines
- Conduct threat modelling and automate vulnerability scans
- Collaborate across teams to ensure security remains a shared responsibility
Must-have:
- Hands-on with CI/CD pipelines and DevOps tooling
- Experience with SAST/DAST scanners, secret management and IaC scanning
- Strong knowledge of cloud IAM, networking and encryption practices
- Experience with policy-as-code (OPA, Sentinel, Kyverno)
Nice-to-have:
- Certifications (e.g. AZ-500, AWS Security, OSCP, DevSecOps Foundation)
- Knowledge of compliance frameworks (SOC2, ISO 27001)
- Experience with HashiCorp Vault, AWS Secrets Manager or similar
For more details contact us at recruitment@lynxmind.com
