Senior DevSecOps Engineer

Job Summary

Integrating security practices into the software development lifecycle, the full-time Senior DevSecOps Engineer will act as the primary link between development, operations, and security teams while working remotely.

Key responsibilities

• Integrate automated security scanning and vulnerability assessment tools into existing CI/CD pipelines
• Codify security standards and governance policies using Policy as Code frameworks to ensure continuous compliance
• Conduct threat modeling and architectural reviews to proactively address risks in cloud-native environments

Required qualifications

• 4+ years of experience in DevSecOps, DevOps, or Cybersecurity Engineering
• Proven expertise in integrating security tooling like Snyk, Trivy, or Aqua into CI/CD pipelines
• Proficiency in implementing Policy as Code using Open Policy Agent (OPA) or similar frameworks
• Hands-on experience with secrets management and Infrastructure as Code security
• Deep understanding of container security and cloud-native protection strategies