DevSecOps Staff Engineer

As a DevSecOps staff engineer, you'll be the guardian of our cloud infrastructure, building security into every layer of our development lifecycle. You'll architect secure CI/CD pipelines, automate security controls, and empower teams to ship faster without compromising safety.

Responsibilities:

• Design and maintain bulletproof CI/CD pipelines with security baked in from day one.
• Integrate cutting-edge security tools (SAST, DAST, SCA) to automate threat detection.
• Implement robust security controls across AWS/GCP, including IAM, container security, and encryption.
• Champion DevSecOps culture by mentoring engineers and driving architectural improvements.
• Stay ahead of emerging threats and evolve our security posture continuously.

Requirements:

• 10+ years of industry experience with deep AWS expertise.
• GCP Certified Security Specialist.
• Hands-on experience implementing SAST, DAST, and penetration testing.
• 5+ years architecting secure GCP cloud solutions (EC2 RDS, S3 VPC, and CloudWatch).
• Strong CI/CD expertise (GitHub Actions, Jenkins).
• OWASP Top 10 knowledge at your fingertips.
• Proficiency in Python or Bash scripting.
• Kubernetes/Docker orchestration experience.

Bonus Points:

• GCP Certified DevOps Engineer.
• Experience with Terraform, Ansible, Chef, or Puppet.
• Observability tool expertise (CloudWatch, New Relic).
• Windows/Linux system administration.

Skills

aws, dast, devops, devsecops, gcp, penetration testing, sast