Description
We are seeking a highly experienced Senior DevSecOps Engineer to lead the integration of security practices within our large and complex multi-cloud environments. This pivotal role involves designing and implementing robust DevSecOps initiatives, embedding security controls directly into CI/CD pipelines to ensure the secure delivery of software. You will leverage your expertise across Azure, AWS, and GCP, managing containerized workloads with Docker and Kubernetes. A key focus will be automating infrastructure using Terraform and Ansible, while applying secure coding principles to mitigate risks like the OWASP Top 10. You will manage a suite of security tools for SAST, DAST, and SCA, and handle secrets management. This position requires strong technical leadership to mentor teams, drive a security-first culture, and collaborate effectively across development, operations, and security departments. Your strategic input will also be vital in designing governance frameworks and optimizing cloud costs.
Requirements
1. 10+ years of experience in DevSecOps, cybersecurity, or related roles.
2. Demonstrated expertise in integrating security tools (SAST, DAST, SCA) into CI/CD pipelines.
3. Extensive hands-on experience with major cloud platforms (Azure, AWS, GCP).
4. Proficiency in containerization technologies, including Docker and Kubernetes.
5. Strong skills in Infrastructure as Code (IaC) with Terraform and Ansible.
6. Proficient in scripting with Python, Bash, or PowerShell for automation.
7. In-depth knowledge of secure coding principles and addressing OWASP Top 10 vulnerabilities.
8. Experience with secrets management tools like Azure Key Vault or HashiCorp Vault.
Desirable
1. Experience designing and implementing enterprise-level DevSecOps governance frameworks.
2. Familiarity with API security, encryption, and compliance standards (e.g., SOC2, ISO 27001).
3. Proven experience in cloud cost optimization and infrastructure budgeting.
4. Strong project management skills and experience with Agile/Scrum methodologies.
5. Experience providing technical leadership and mentoring to engineering teams.