Senior DevSecOps Engineer

Responsibilities:

• Embed security into CI/CD pipelines and infrastructure as code (IaC).
• Perform security assessments of applications, containers, and cloud infrastructure.
• Automate security testing and monitoring using tools like Snyk, Aqua, or Twistlock.
• Collaborate with development and operations teams to ensure security best practices.
• Implement and manage secrets management solutions (e.g., HashiCorp Vault, AWS Secrets Manager).
• Monitor systems for security vulnerabilities and respond to incidents.
• Develop and enforce policies, standards, and procedures for secure development and deployment.
• Conduct threat modeling and risk assessments.
• Stay current with emerging security threats, vulnerabilities, and technologies.
• Work with Firewall and Web Application Firewall (WAF) policies and configurations to enhance application and infrastructure security.
• Perform security testing using DSAT (Dynamic Security Application Testing) and SAST (Static Application Security Testing) as part of the SDLC.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or related field.
• 2 years of proven experience in DevOps, security engineering, or cloud infrastructure.
• Strong knowledge of CI/CD tools (e.g. Jenkins, GitHub Actions, GitLab CI, CircleCI).
• Experience with IaC tools like Terraform, CloudFormation, or Ansible.
• Proficiency with cloud platforms (AWS, Azure, GCP).
• Familiarity with containerization and orchestration (Docker, Kubernetes).
• Knowledge of vulnerability management and security tools (e.g. Nessus, OWASP ZAP, Trivy).
• Strong scripting skills (Python, Bash, etc.).
• Understanding of compliance standards (SOC 2, ISO 27001, HIPAA, etc.).
• Good knowledge of Firewalls and Web Application Firewalls (WAF).
• Good knowledge of DSAT (Dynamic Security Application Testing) and SAST (Static Application Security Testing).

Benefits

Office environment: When you come to our b_labs office, you'll find creative workspaces and an open design to foster collaboration between teams.

Flexibility: You know best whether you want to work from home or in the office.

Equipment: From "Day 1" you will receive all the equipment you need be successful at work.