devsecops engineer

Leidos

<div>Description
Leidos is seeking a skilled Sr DevSecOps Engineer to lead efforts in automating and optimizing our cloud integration pipelines for the Passenger Systems Program Directorate (PSPD) within Customs and Border Protection (CBP), supporting DHS&rsquo;s mission-critical traveler screening systems. This full-time role is pivotal in advancing DevOps across the organization including CI/CD, ZeroTrust, enhanced automation, and ensuring secure software solutions through AWS EKS expertise, vulnerability remediation, and a &quot;shift-left&quot; security approach. Collaborating with agile teams and stakeholders, you&rsquo;ll drive innovation in cloud transformation while enjoying a hybrid work arrangement with occasional on-site meetings in Ashburn, VA.
**This position REQUIRES the candidate to be in Ashburn, VA, twice a week**
Roles &amp; Responsibilities:<ul><li>
Design, implement, and maintain secure CI/CD pipelines utilizing AWS EKS, Rafay, and Harness.</li><li>
Architect and implement solutions within the AWS EKS environment, leveraging native AWS services (Lambda, SNS, SQS, etc. ) and third-party tools.</li><li>
Conduct proactive threat modeling and risk assessments to identify potential vulnerabilities and define mitigation strategies.</li><li>
Implement automated security and vulnerability scanning within the CI/CD pipeline and for containerized applications (Anchore, Twistlock, etc.).</li><li>
Drive the remediation of security vulnerabilities, collaborating with development and operations teams to implement effective solutions.</li><li>
Manage sensitive data securely using appropriate tools like AWS Secrets Manager or HashiCorp Vault.</li><li>
Enahance security monitoring, logging, and alerting systems to detect and respond to security incidents promptly.</li><li>
Participate in limited incident response activities, including root cause analysis and implementing preventative measures.</li><li>
Evaluate and recommend new security tools and technologies to enhance the security posture.</li><li>
Stay up-to-date with the latest tools and security trends, threats, and vulnerabilities, and proactively educate the team.</li></ul>
Minimum Qualifications:
<ul><li>BA/BS with 12+ years of relevant experience or 10+ years of relevant experience with Master's Degree</li><li>
Must be able to maintain and obtain a CBP Background Investigation prior to start</li><li>
Proven experience as a Senior DevSecOps Engineer or similar leadership role with a strong focus on security.</li><li>
Expertise in AWS cloud infrastructure, specifically with AWS EKS and container orchestration.</li><li>
Proficiency in designing and implementing secure CI/CD pipelines using Harness and Rafay.</li><li>
Deep understanding of security best practices, including threat modeling, risk assessment, and vulnerability management.</li><li>
Experience with automated security tools (Anchore, Twistlock, etc.) and security scanning tools.</li><li>
Strong knowledge of container runtime and management principles and best practices for securing Kubernetes environments.</li><li>
Familiarity with Infrastructure as Code (IaC) principles and automation tools (e.g., Ansible, Terraform, CloudFormation).</li><li>
Proficiency in scripting languages like Python or Bash.</li><li>
Excellent problem-solving, analytical, and critical thinking skills.</li><li>
Strong communication and collaboration skills, with the ability to work effectively across cross-functional teams.</li></ul>
Preferred Qualification:<ul><li>
Relevant certifications such as Certified DevSecOps Professional (CDP) or Certified Information Systems Security Professional (CISSP).</li><li>
Experience with various compliance frameworks and regulations (e.g., PCI-DSS, HIPAA, GDPR).</li></ul>
At Leidos, we don&rsquo;t want someone who &quot;fits the mold&quot;&mdash;we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, &ldquo;what&rsquo;s next?&rdquo; before the dust settles on &ldquo;what&rsquo;s now.&rdquo;
If you&rsquo;re already scheming step 20 while everyone else is still debating step 2&hellip; good. You&rsquo;ll fit right in.<h2 class="jobSectionHeader">
Original Posting:</h2>
September 4, 2025 
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.<h2 class="jobSectionHeader"> 
Pay Range:</h2>
Pay Range $126,100.00 - $227,950.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</div>

Sr. DevSecOps Engineer

GS1 UAE

We are looking for an experienced Senior DevSecOps Engineer to take ownership of our infrastructure, security, and developer support processes across office, cloud, and bare-metal environments. You will be responsible for ensuring reliability, scalability, and security across all layers of our systems, while supporting distributed development teams.Responsibilities:Office &amp; Network<ul><li>Manage and support office-user devices (updates, troubleshooting, endpoint security).</li><li>Administer and secure Microsoft 365 (accounts, access policies, integrations)</li><li>Maintain and optimize office networking, including office access control and office monitoring</li></ul>Cloud Infrastructure (AWS &amp; Kubernetes)<ul><li>Design, maintain, and improve AWS infrastructure using Terraform.</li><li>Manage and harden Kubernetes clusters, deployments, and monitoring stacks (Prometheus, Loki, Grafana).</li><li>Operate CI/CD pipelines (GitHub Actions, ArgoCD, Helm) and support developer workflows.</li><li>Implement secret and key management solutions.</li></ul>Bare-Metal &amp; Connectivity<ul><li>Maintain on-premises servers and virtualization platforms.</li><li>Manage VPNs (site-to-site, IPSec tunnels) and ensure secure connectivity across environments.</li><li>Oversee integrations between cloud, on-prem, and partner systems.</li></ul>Security &amp; Compliance<ul><li>Implement vulnerability scanning, patching, and threat detection.</li><li>Define and enforce security policies across cloud, office, and application layers.</li><li>Conduct internal security audits and maintain compliance with frameworks (ISO 27001, SOC 2, NIST).</li><li>Develop and maintain documentation, playbooks, and incident response processes.</li></ul>Cost Optimization<ul><li>Conduct audits of infrastructure and services with a focus on cost efficiency, scalability, and security.</li><li>Recommend and implement migrations or updates to improve performance, resilience, and alignment with best practices.</li></ul>Collaboration &amp; Support<ul><li>Support distributed development teams (Python, Angular, React, Docker) with infrastructure and tooling.</li><li>Act as a security advisor during architecture and design reviews.</li><li>Mentor team members on DevSecOps practices and secure development.</li></ul>Documentation<ul><li>Create and maintain clear, comprehensive documentation for all infrastructure, security, and operational processes.</li><li>Ensure existing systems and solutions are well-documented to support knowledge sharing, onboarding, and compliance.</li><li>Continuously update playbooks, runbooks, and configuration guides as systems evolve.</li></ul>Requirements<ul><li>5+ years of experience in DevSecOps, Cloud Security, or Infrastructure Engineering.</li><li>Strong expertise in AWS services and security configurations.</li><li>Deep hands-on experience with Kubernetes and container orchestration.</li><li>Proven track record with Infrastructure as Code (Terraform).</li><li>Proficiency with CI/CD tools and pipelines (GitHub Actions, ArgoCD, Helm).</li><li>Solid scripting skills (Python, Bash, or equivalent).</li><li>Familiarity with DevSecOps tools (Vault, Istio, Trivy, Snyk, etc.).</li><li>Strong understanding of secure SDLC, OWASP Top 10, and modern threat modeling.</li><li>Knowledge of network security (segmentation, policies, service mesh).</li><li>Excellent communication and problem-solving skills.</li><li>Ability and willingness to work 100% onsite in our Dubai office.</li></ul>Preferred Certifications<ul><li>Certified DevSecOps Professional (CDP)</li><li>Certified Kubernetes Security Specialist (CKS)</li><li>AWS Security Specialty</li><li>Other relevant security or cloud certifications</li></ul>About GS1 Emirates:GS1 Emirates is part of the global GS1 network, a not-for-profit organization that works with industry, for industry, providing global standards and technology-neutral services and solutions to help solve the business challenges of today and tomorrow.GS1 develops and maintains the most widely used global standards for efficient business communication. It is best known for the barcode, named by the BBC as one of &ldquo;the 50 things that made the world economy.&rdquo; GS1 standards and services improve supply chains&rsquo; efficiency, safety, and visibility across physical and digital channels in 25 sectors. With offices in 118 countries, 2 million companies, and 6 billion transactions every day, GS1 standards create a common language that supports global systems and processes.At GS1 Emirates, we collaborate with our stakeholder communities to develop and implement a robust system of standards that enables the unique identification, accurate capture, and automatic sharing of trusted and verified information about products, locations, and traceability events.We are at the forefront of several UAE initiatives and are committed to helping Emirati businesses adopt world-class best practices. We offer a wide range of services and solutions to support companies, industry associations, and government authorities to work smarter and more efficiently using the GS1 global system of standards.Job Type: Full-timeAbility to commute/relocate:<ul><li>Dubai: Reliably commute or planning to relocate before starting work (Preferred)</li></ul>Application Question(s):<ul><li>Are you already based in UAE with a residence visa?</li></ul>

Senior DevSecOps Engineer

Unisys

<div>What success looks like in this role:
<ul><li>Responsible for implementing DevSecOps ecosystem on AWS for distributed enterprise level applications.
</li><li>Provides analytical support in the conceptualization, development, and implementation of AWS-based DevSecOps systems for enterprise systems, networks, or application software, as well as desktop applications.
</li><li>Accountable for service commitments at individual request level for in scope applications and requests. Is an expert in deployment activities (QAT, UAT environments etc...)
</li><li>Coordinates technical release activities with applications development and operations staff to ensure successful release outcomes.
</li><li>Responsible for managing the integrity of all pre-production environments, such as development, test, QA, and staging environments.
</li><li>Responsible for the analysis, design, implementation and support of all systems and processes supporting the configuration management process, such as source code management, workflow, issue tracking, deployment, provisioning, and testing automation.
</li><li>Responsible for process improvement and may monitor the performance of all configuration management activities.
</li><li>Responsible for the development, testing and implementation of processes used for configuration management, deployment, and automation.
</li><li>Implement the branching and merging strategy and component architecture.
</li><li>Implement the integration between the SCM tools and CI Tools and may setting Configuration Management policies and procedures.
</li><li>Provides technical advice and consultation on complex, critical issues, and escalations.
</li><li>Develops program logic for new applications or analyzes and modifies logic in existing applications.
</li><li>Codes, tests, debugs, documents, implements, and maintains DevSecOps for enterprise level software applications.
</li><li>Analyzes requirements and may maintain, test, and integrate application components.
</li><li>Ensures that system improvements are successfully implemented.
</li><li>May assist with the evaluation of new and existing software products.
</li><li>Reviews design, coding, and unit testing.
</li><li>Ensures the code is written with high quality and less complexity.
</li><li>Promotes innovation within team or project.
</li></ul>#LI-SN1
You will be successful in this role if you have:
<ul><li>Requires a Bachelor&rsquo;s degree OR equivalent experience and minimum of 5+ years of related experience in a broad range of AWS DevSecOps ecosystems and SRE
</li><li>5+ years of hands-on deep experience in designing and implementing AWS DevSecOps for distributed enterprise grade applications
</li><li>Advanced experience in the implementation of DevSecOps for end-to-end automated code deployments
</li><li>Advanced experience in the implementation of DevSecOps for end-to-end automated infrastructure deployments
</li><li>Advanced experience on AWS
</li><li>Advanced experience in the implementation of DevSecOps tools such as
<ul><li>JIRA, Jenkins, Ansible, Harbor, Octopus, Rancher
</li></ul></li><li>Deep hands-on knowledge of managing and automating deployment of:
<ul><li>AWS Lambda functions
</li><li>API Gateway, DNS, EKS, Nginx, management
</li><li>App Mesh, Load Balancers, Rout53, API Gateway
</li><li>SNS, SQS, MKS (Kafka)
</li></ul></li><li>Deep knowledge of AWS Services such as:
<ul><li>KMS, Secrets Manager
</li><li>EKS, ECS
</li><li>RDS
</li><li>Cognito
</li></ul></li><li>Experience with deploying and scaling Kafka clusters on AWS
</li><li>Advanced experience in the implementation of DevSecOps for logging and monitoring systems
</li><li>Advanced experience in the implementation of implementation of deployment pipeline for code deployments with JIRA hooks using tools such as Jenkins, Octopus
</li><li>Advanced experience in the implementation of deployment pipeline for infrastructure deployments using tools such as Terraform
</li><li>Hands on experience in Kubernetes
</li><li>Hands on experience in Linux, Windows operating systems
</li><li>Hands on experience in Java or .Net, Python, Shell Scripting
</li><li>Hands on experience in code repositories such as Git, Bitbucket
</li><li>Hands on experience in SQL technologies such as Oracle, MS-SQL
</li><li>Hands on experience in artifactory tools such as Nexus, JFrog
</li><li>Hands on experience in CI/CD integration of SonarQube with deployment pipeline
</li><li>Hands on experience in CI/CD integration of Fortify, Black Duck
</li><li>Hands on experience in integrating distributed enterprise level systems.
</li><li>Hands on experience in monitoring tools such as Datadog, New Relic, other cloud monitoring tools
</li><li>Hands on experience in logging tools such as Splunk, Elasticsearch, Elasticsearch - Kibana
</li><li>Experience in No-SQL technology is a plus.
</li><li>Experience in working in a fast-paced dynamic work environment.
</li><li>Experience in triaging live production issues and resolving the issues within SLA leveraging the DevSecOps ecosystem.
</li><li>Ability to resolve complex problems with cost effective and innovative solutions.
</li><li>Willingness to learn the new technologies as the market evolves.
</li></ul>Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.
This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at GlobalRecruiting@unisys.com or alternatively Toll Free: 888-560-1782 (Prompt 4). US job seekers can find more information about Unisys&rsquo; EEO commitment here .</div>

Astrion

<div>Overview:
<div>
DevSecOps Engineer</div><div>
LOCATION: WPAFB</div><div>
JOB STATUS: Full-Time</div><div>
CLEARANCE: Top Secret</div> 
Be the Difference 
Astrion has an exciting opportunity for DevSecOps Engineer for the ISR/SOF contract, supporting the Air Force Division. 
JOB DETAILS: 
LOCATION: Wright Patterson AFB; Dayton, OH 
JOB STATUS: OPEN 
TRAVEL: ~5-10 % 
REQUIRED QUALIFICATIONS / SKILLS<ul><li>
DevSecOps experience</li></ul> 
Security Clearance: Top Secret Security Clearance 
Education: 
Master&rsquo;s or Doctorate Degree in a related field and at least 20 years of experience in the respective technical/professional discipline being performed, 12 years of which must be in the DoD 
OR Bachelor&rsquo;s Degree in a related field and 25 years of experience in the respective technical/profession discipline being performed, 15 years of which must be in the DoD 
OR 30 years of directly related experience with proper certifications, 20 years of which must be in the DoD 
RESPONSIBILITIES 
<ul><li>
Support Air Force acquisition management and C4ISR systems.
</li><li>Provide test and evaluation support for the GEOINT systems, including expertise necessary for the designing, planning, execution, analysis and reporting phases of test and evaluation programs to assess the performance of aeronautical systems.
</li><li>Assist in test and test-related documentation for compliance and conformity with mandated guidance.
</li><li>Evaluation of program technical risk and establishment of risk mitigation plans while providing oversight of risk reduction efforts.
</li><li>Provide cost-effect test-engineering, planning and execution, including maintaining and submitting annual Program Introduction Documents (PIDs).</li></ul> 
What We Offer 
<ul><li>
Competitive salaries</li><li>
Continuing education assistance</li><li>
Professional development allotment</li><li>
Multiple healthcare benefits packages</li><li>
401K with employer matching</li><li>
Paid time off (PTO) along with a federally recognized holiday schedule</li></ul> 
Who We Are 
At Astrion, we innovate, elevate, and shape the world of tomorrow. At our core is our purpose to &ldquo;Be the Difference&rdquo;. This means we encourage our employees to take action and be the driving force for positive change. We foster an environment where innovative solutions flourish and our company continuously evolves. 
We have a culture of care, empathy, and making a tangible difference within our organization and communities. We embrace continuous learning, growth, and innovation, and pushing the boundaries of what&rsquo;s possible. We promote collaboration and empowering our teams is at the core of our success.<div> 
Join Astrion and Be the Difference in your career and the world!</div><div></div><div> 
Astrion is an Equal Employment Opportunity Employer. We provide equal employment opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, or any other characteristic protected by federal, state, or local laws.</div><div><div><div><div><div><div><div><div><div><div><div>
#LI-CD2</div></div></div></div></div></div></div></div></div></div></div></div><div></div>

DevSecOps Engineer

Purelogics

Job Description:<ul><li>Knowledge of cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes, OpenShift).</li><li>Implement security tools and best practices within CI/CD pipelines to automate security testing, vulnerability assessments, and ethical hacking.</li><li>Design, deploy, and manage secure infrastructure using Infrastructure as Code (IaC) principles and tools like Terraform, CloudFormation, or Ansible.</li><li>Lead and perform ethical hacking, penetration testing, and security audits to identify vulnerabilities, assess risks, and recommend mitigation strategies.</li><li>Conduct penetration testing on applications, networks, and cloud environments using tools like Burp Suite, Metasploit, Nmap, and Kali Linux.</li><li>Develop, maintain, and enhance security-focused regression testing frameworks to identify and address security vulnerabilities proactively.</li><li>Monitor and respond to security threats, perform regular security assessments, and implement remediation strategies using SIEM tools like Splunk, ELK, or AWS Security Hub.</li><li>Participate in incident response and post-incident analysis, contributing to continuous improvement and learning.</li><li>Collaborate with cross-functional teams to define and implement best practices for secure DevOps processes.</li><li>Ensure adherence to security compliance frameworks (e.g., NIST, CIS, ISO 27001, SOC 2) and assist in security audits.</li><li>Implement security hardening techniques for applications, networks, and infrastructure.</li><li>Develop and enforce security policies for secrets management, identity &amp;amp; access management (IAM), and role-based access control (RBAC).</li><li>Automate security scanning, configuration management, and patch management processes.</li><li>Conduct threat modeling and risk assessment to improve security posture.</li><li>Work with developers to integrate security best practices into the software development lifecycle (SDLC).</li><li>Stay updated with the latest security threats, vulnerabilities, and industry trends.</li></ul>Required Qualification:<ul><li>Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field.</li></ul>Required Skills:<ul><li>Cloud Security: AWS, Azure, GCP</li><li>Security Frameworks &amp;Compliance: NIST, CIS, ISO 27001, SOC 2</li><li>CI/CD Security: Jenkins, GitLab CI, GitHub Actions, Azure DevOps</li><li>Infrastructure as Code (IaC): Terraform, CloudFormation, Ansible</li><li>Container Security: Docker, Kubernetes, OpenShift, Istio</li><li>Web Security &amp; Penetration Testing: OWASP Top 10, Burp Suite, Metasploit, Kali Linux, Nmap, SQL Injection, XSS, CSRF</li><li>Network Security: VPNs, Firewalls, IDS/IPS, Network Penetration Testing</li><li>Monitoring &amp; Incident Response: Splunk, ELK, AWS Security Hub, SIEM tools</li><li>Scripting &amp; Automation: Python, Bash, PowerShell</li><li>IAM &amp; Secrets Management: AWS IAM, HashiCorp Vault, AWS Secrets Manager, Azure Key Vault</li><li>Threat Modeling &amp; Risk Assessment: STRIDE, DREAD, MITRE ATT&amp;CK</li></ul>Experience:<ul><li>Minimum 2 years of experience in DevSecOps, Security Engineering, or a related field.</li><li>Hands-on experience in penetration testing, ethical hacking, and security automation.</li></ul>About Us:PureLogics is a full services technology company with having presence in the USA, UAE, and in Lahore. Over the past 18+ years, we have matured from a narrowly-focused five-person team to a well-established technology hub with around employees. We&rsquo;re CMMI Level 2 and ISO Certified company and highly acclaimed AWS consulting partners.The success of our business mainly lies in building a team of A-players, who work together and build together, and who crave perfection in everything they produce for our elite clients. We offer the opportunity to young and enthusiastic individuals that are eager to take on tough challenges under our mentorship toward a bright future.What are we offering?<ul><li>Health Insurance</li><li>Provident Fund</li><li>Annual Paid Leaves</li><li>Compensation Plans</li><li>Paid Certifications &amp; Training</li><li>Car Finance Program</li><li>Bike Finance Program</li><li>Child Education Program</li><li>Two Annual Trips</li><li>Stars Of the Month Rewards</li><li>Quarterly Meetups</li><li>Referral Bonuses</li><li>Birthday &amp; Eid Gifts</li></ul>Job Type: Full-timePay: Rs100,000.00 - Rs200,000.00 per monthWork Location: On the road

SandboxSecurity.ai

Job Title: Cloud Security Engineer / DevSecOps EngineerLocation: Dubai (Open to candidates in UAE or India willing to relocate)Job Type: Full-timeAbout the Role: We are looking for a Cloud Security Engineer with strong expertise in Azure / GCP / AWS and proven experience in securing enterprise and cloud-native environments. The ideal candidate will have a background in DevSecOps, cloud security posture management (CSPM/CNAPP), and compliance frameworks.Key Responsibilities:<ul><li>Implement and manage cloud security (Azure/GCP/AWS).</li><li>Conduct security assessments, reviews, and vulnerability management.</li><li>Integrate DevSecOps practices into CI/CD pipelines.</li><li>Ensure compliance with standards such as ISO 27001, PCI DSS, NIST, CIS.</li><li>Work on CSPM, CNAPP, Microsoft Defender XDR, Sentinel, Kubernetes/Container Security.</li></ul>Key Skills:<ul><li>Cloud Security (Azure, GCP, AWS)</li><li>CSPM / CNAPP</li><li>DevSecOps &amp; Secure SDLC (SAST/DAST, OWASP)</li><li>Compliance (ISO 27001, PCI DSS, NIST)</li><li>Microsoft Defender XDR, Sentinel</li><li>Kubernetes / Container Security</li></ul>Qualifications:<ul><li>5+ years in Cloud / Application Security.</li><li>Relevant certifications (Azure Security, ISO Lead Auditor, etc.) preferred.</li></ul>Interested candidates can apply directly via Indeed or share their CVs at preet@sandboxsecurity.aiJob Type: Full-timePay: AED15,000.00 - AED18,000.00 per month

Senior Cloud Security Engineer

DICETEK LLC

<div>Security Engineer
Position Overview
We are looking for an experienced Security Engineer with 7-10 years of proven expertise in application, infrastructure, and cloud security. The ideal candidate will have hands-on experience in penetration testing, DevSecOps practices, cloud security (AWS &amp; Azure), and security architecture. They will also play a key role in building a strong security culture, driving awareness, and collaborating with multiple teams to integrate security seamlessly across the organization.
Responsibilities<ul><li>
Perform penetration testing of web applications, mobile applications, and APIs.</li><li>
Perform secure code reviews to identify vulnerabilities in application code, scripts, and configurations.</li><li>
Configure, fine-tune, and review results from SAST, DAST, IaC, container, and dependency scanning tools.</li><li>
Drive DevSecOps initiatives, including security integration in CI/CD pipelines.</li><li>
Review and enhance Kubernetes security, container security, and infrastructure security.</li><li>
Contribute to security architecture design and reviews for applications, infrastructure, and cloud.</li><li>
Conduct threat modeling, risk assessments, and vulnerability management.</li><li>
Establish and deliver security training, awareness sessions, and best practices to teams.</li><li>
Collaborate with development, DevOps, and infrastructure teams to ensure secure design and delivery.</li><li>
Act as a security advisor to stakeholders, explaining risks and recommendations in simple, non-technical terms.</li><li>
Participate in incident response and post-incident reviews, ensuring lessons learned are applied.</li><li>
Stay updated on emerging threats, attack techniques, and new security technologies.</li></ul>
Qualifications<ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Information Security, or related field.</li><li>
7-10 years of experience in information security roles.</li><li>
Strong expertise in penetration testing (web, mobile, API) with hands-on experience.</li><li>
Hands-on experience with SAST, DAST, SCA, IaC scanning, and container security tools (e.g., SemGrep, Checkmarx, Veracode, BurpSuite, ZAP, Prisma, Trivy, etc.).</li><li>
Deep understanding of DevSecOps principles, CI/CD pipeline security, and security automation.</li><li>
Knowledge of cloud security best practices in AWS and Azure (e.g., IAM, networking, encryption, monitoring).</li><li>
Familiarity with Kubernetes, Docker, and container runtime security.</li><li>
Solid grasp of security architecture and secure design principles.</li><li>
Strong scripting skills (Python, Bash, or similar).</li><li>
Excellent communication and stakeholder management skills.</li></ul>
Good to Have<ul><li>
Certifications such as OSCP, OSWE, CISSP, CCSP, CKS, CKA, AWS Security Specialty, or Azure Security Engineer Associate.</li><li>
Exposure to GRC frameworks (ISO 27001, SOC 2, NIST, CIS).</li><li>
Familiarity with privacy and compliance requirements (GDPR, PCI DSS, HIPAA, etc.).</li></ul>
Soft Skills<ul><li>
Strong analytical and problem-solving mindset.</li><li>
Ability to explain technical risks to non-technical audiences.</li><li>
Collaborative approach, working effectively with development, DevOps, product, and leadership teams.</li><li>
Passion for continuous learning and building a culture of security.</li></ul></div>

Security Engineer

Search 8002+ Devsecops engineer jobs near you this September. New roles added regularly across leading industries. Apply today.

8002 devsecops engineer jobs NEAR_ME

Sr. DevSecOps Engineer

Senior DevSecOps Engineer

Senior DevSecOps Engineer

DevSecOps Engineer

DevSecOps Engineer

Senior Cloud Security Engineer

Security Engineer