DevSecOps Engineer

DevSecOps Engineer

Experience: 5+ years

Role Overview

We are looking for an experienced DevSecOps Specialist who can combine application and infrastructure security expertise with secure software development and automation. The role focuses on integrating security into the entire software delivery lifecycle, from development through deployment and operations.

The successful candidate should have strong scripting skills, particularly in Python and Linux Shell, and practical experience implementing security controls across SDLC and CI/CD environments. A proactive approach to security, automation, and continuous improvement is essential, especially within modern cloud-native and AI-driven environments.

Key Responsibilities

• Build, implement, and continuously improve DevSecOps processes across development and deployment workflows.
• Integrate and operate security testing solutions such as SAST, DAST, dependency scanning, vulnerability assessment, and container security tools.
• Create and maintain security automation solutions using Python and Linux Shell Scripting.
• Conduct security reviews and assessments of applications and infrastructure, and coordinate remediation of identified risks.
• Work closely with development, infrastructure, operations, and security teams to incorporate security requirements throughout the SDLC.
• Implement, maintain, and improve security controls within Azure DevOps CI/CD pipelines.
• Contribute to the secure implementation of AI/ML technologies, including AI security assessments, governance, and risk management.
• Define and maintain security guidelines, standards, policies, and best practices for cloud, DevOps, and AI-enabled environments.
• Track new and emerging security threats and translate them into appropriate security controls, mitigations, and engineering improvements.

Required Skills & Experience

• 5+ years of professional experience in DevSecOps, Application Security, Infrastructure Security, or a closely related area.
• Strong programming and scripting skills in Python and Linux Shell Scripting.
• Practical experience implementing and operating:
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Vulnerability Management
  • Dependency and software composition security
  • Container security
• Strong knowledge of Application Security and Infrastructure Security concepts and practices.
• Proven experience embedding security controls and automated security checks into Azure DevOps pipelines.
• Understanding of secure software development principles and integrating security into CI/CD processes.

Nice-to-Have Skills

• Familiarity with AI Security, including LLM-related threats, model security, AI application risks, and secure AI development.
• Experience securing Kubernetes clusters and containerized workloads.
• Knowledge of Infrastructure as Code (IaC), with Terraform being preferred.
• Experience with Microsoft Azure and cloud security practices.
• Practical knowledge of container and cloud security.
• Experience creating or maintaining Ansible automation scripts.

Desired Personal Attributes

• Strong analytical thinking and effective problem-solving abilities.
• Comfortable collaborating with multidisciplinary teams across engineering, operations, and security.
• Excellent communication skills and the ability to work effectively with technical and non-technical stakeholders.
• Proactive and self-motivated approach, with a strong interest in automation and continuous improvement.
• Genuine interest in cybersecurity, secure software engineering, emerging technologies, and modern security practices.