Senior DevSecOps Engineer

Key Responsibilities

1. AWS Cloud Security & Remediation (Primary Responsibility)

• Manage AWS Security Hub across multiple AWS accounts, regions, and environments.
• Monitor, investigate, prioritize, and remediate security findings.
• Manage and configure AWS security services, including Security Hub, GuardDuty, Inspector, AWS Config, and CloudTrail.
• Identify and resolve security misconfigurations related to IAM, EC2, S3, VPC, RDS, CloudFront, and other AWS services.
• Implement automated security remediation using Lambda, EventBridge, and Systems Manager.
• Establish remediation SLAs, track findings, and maintain security compliance.

2. Infrastructure Security & Hardening

• Perform AWS infrastructure security assessments and implement security best practices.
• Manage IAM permissions, network security, encryption, access controls, and logging.
• Ensure Linux server hardening, security patching, and vulnerability remediation.
• Secure infrastructure components such as Apache Tomcat, Nginx, MySQL, and Redis.
• Manage SSL/TLS certificates and secure configurations.

3. Application Security & Vulnerability Management (Secondary Responsibility)

• Identify and coordinate remediation of application and API security vulnerabilities.
• Implement SAST, DAST, SCA, and dependency scanning tools.
• Address OWASP Top 10 vulnerabilities and Java application security issues.
• Integrate security checks into GitHub and AWS CodeBuild CI/CD pipelines.
• Coordinate penetration testing and track vulnerability remediation.

4. Security Monitoring & Incident Response

• Monitor AWS security alerts and investigate suspicious activities.
• Handle security incidents, coordinate remediation, and perform root cause analysis.
• Maintain security dashboards, reports, and escalation processes.

5. DevSecOps & Security Automation

• Maintain secure CI/CD pipelines using GitHub Actions and AWS CodeBuild.
• Develop Python and Bash scripts for security automation.
• Implement infrastructure security controls using Terraform or equivalent IaC tools.
• Automate security checks, compliance validation, and remediation activities.

Required Technical Skills

AWS Cloud Security (Must Have)

• Strong hands-on experience with AWS Security Hub, GuardDuty, Inspector, AWS Config, CloudTrail, and IAM.
• Experience in investigating and remediating AWS security findings across multiple accounts and regions.
• Good understanding of AWS Organizations, IAM, encryption, and network security.

Infrastructure & Application Security

• Strong Linux administration and server-hardening experience.
• Knowledge of EC2, VPC, S3, CloudFront, Route 53, ACM, and load balancers.
• Experience with vulnerability assessment, patch management, SSL/TLS, and firewall security.
• Understanding of OWASP Top 10, API security, Java application security, and vulnerability scanning.

Automation & DevSecOps

• Proficiency in Python and Bash scripting.
• Experience with GitHub, AWS CodeBuild, and CI/CD security integration.
• Knowledge of Terraform or other Infrastructure as Code tools.
• Experience with AWS security automation.

Good to Have

• AWS Certified Security Specialty certification.
• Knowledge of CIS AWS Foundations Benchmark, SOC 2, and ISO 27001.
• Experience with AWS Control Tower, WAF, SIEM, and security incident response.
• Experience securing enterprise SaaS applications and multi-account AWS environments.