DevSecOps Engineer

Job Summary

A company is looking for a DevSecOps Engineer to lead offensive security operations and enhance security measures within the development process.

Key Responsibilities

• Form, lead, and execute Red Team engagements to simulate real-world attack scenarios and recommend remediation strategies
• Integrate security requirements into architecture, design, and coding practices
• Automate and conduct reviews of code, libraries, and dependencies to identify vulnerabilities

Required Qualifications

• Strong background in application security (OWASP, NIST, MITRE ATT&CK)
• Proficiency in one or more programming languages (C#, Python, Java, or JavaScript)
• Experience with CI/CD and DevSecOps tooling (SonarQube, Snyk, Veracode, GitHub Actions, etc.)
• Familiarity with container security (Docker, Kubernetes, Istio) and cloud security expertise (IAM, secrets management)
• Certifications such as CISSP, OSCP, or CEH are a plus