DevSecOps Engineer

DevSecOps Engineer / Senior DevSecOps Engineer

Requirements

* Experience in DevSecOps, Cloud Security, Application Security, or DevOps

* Hands-on experience working in AWS, Azure, Google Cloud, and on-prem environments

* Strong knowledge and hands-on experience in CI/CD pipelines and Secure SDLC processes

* Experience with security controls for source code, dependencies, Dockerfiles, container images, Helm charts, and Infrastructure as Code within the pipeline

* Knowledge of integrating and managing SAST, SCA, container security, IaC scanning, and similar controls into CI/CD processes

* Experience working with SonarQube, Fortify, or similar application security tools

* Evaluating, prioritizing, and managing remediation processes for findings resulting from security scans

* Command of security gate, quality gate, and pipeline policy approaches

* Strong technical knowledge in the Docker and Kubernetes ecosystem

* Command of IAM, secrets management, and privileged access management principles in multi-cloud / hybrid structures

* Experience with Git, Terraform, Helm, and similar DevOps / Infrastructure as Code technologies

* Technical competence in Linux systems, troubleshooting, and providing hands-on support to existing DevOps operations

* Ability to develop security controls not just by operating them, but with a mindset of automation, standardization, and continuous improvement

Preferred

* Experience in Prisma Cloud or similar CNAPP / CSPM / CWPP solutions

* Experience in CyberArk Conjur or similar PAM / secrets management solutions

* Experience in Kubernetes security, admission control, policy-as-code, and runtime security

* Ability to develop automation with Python, Bash, or PowerShell

* Experience in false-positive management, rule/policy tuning in DevSecOps tools, and optimizing security controls without disrupting developer experience

* Experience working with monitoring, logging, and observability tools

The profile we are looking for is a teammate who does not just use security tools; but can understand the existing DevSecOps pipeline structure, effectively manage SonarQube/Fortify and similar controls, integrate new security requirements into the pipeline, and directly contribute to DevOps operations when necessary.

"bgts INT"