DevSecOps Engineer

Job Summary

A company is looking for a DevSecOps Engineer to lead offensive security operations and enhance security practices across development and operations.

Key Responsibilities

• Form, lead, and execute Red Team engagements to simulate real-world attack scenarios and recommend remediation strategies
• Integrate security requirements into architecture, design, and coding practices while automating code and dependency reviews
• Implement security tools into CI/CD pipelines and work with DevOps to secure cloud environments and infrastructure

Required Qualifications

• Strong background in application security (OWASP, NIST, MITRE ATT&CK)
• Proficiency in programming languages such as C#, Python, Java, or JavaScript
• Experience with CI/CD and DevSecOps tooling (e.g., SonarQube, Snyk, Veracode)
• Cloud security expertise, particularly in IAM and secrets management
• Certifications such as CISSP, OSCP, or CEH are a plus