Cybersecurity Architect

Senior DevSecOps & Cloud Security Engineer

We are seeking an experienced Senior DevSecOps & Cloud Security Engineer with strong expertise in Python development, SIEM platforms, cloud-native technologies, security engineering, Terraform, CI/CD automation, and infrastructure as code (IaC). The ideal candidate will drive security automation, enhance cloud security posture, and integrate security controls throughout the software development lifecycle.

Key Responsibilities

• Design, implement, and maintain secure cloud-native infrastructure across multi-cloud or hybrid environments.
• Develop and maintain Python-based automation tools, scripts, and integrations for security operations and DevSecOps workflows.
• Build, optimize, and manage CI/CD pipelines with embedded security controls and automated compliance checks.
• Implement and maintain Infrastructure as Code (IaC) using Terraform.
• Configure, manage, and enhance SIEM platforms for threat detection, monitoring, incident response, and security analytics.
• Integrate security testing tools (SAST, DAST, SCA, container scanning) into CI/CD pipelines.
• Develop automated remediation and response workflows for security incidents.
• Collaborate with development, operations, and security teams to implement DevSecOps best practices.
• Secure containerized and Kubernetes-based environments through policy enforcement and runtime security controls.
• Monitor cloud environments and implement security controls aligned with industry standards and compliance frameworks.
• Conduct security assessments, vulnerability management, and risk analysis.
• Create technical documentation, runbooks, and security standards.

Required Skills & Experience

• 5+ years of experience in DevSecOps, Cloud Security, Security Engineering, or related roles.
• Strong programming and automation experience with Python.
• Hands-on experience with SIEM platforms such as Splunk, QRadar, Sentinel, Elastic SIEM, or similar.
• Deep understanding of DevSecOps principles and secure SDLC practices.
• Expertise in Terraform and Infrastructure as Code.
• Experience designing and managing CI/CD pipelines using Jenkins, GitHub Actions, GitLab CI, Azure DevOps, or similar tools.
• Strong knowledge of cloud-native architectures and platforms such as AWS, Azure, or GCP.
• Experience with container technologies including Docker and Kubernetes.
• Knowledge of cloud security services, identity management, secrets management, and security monitoring.
• Experience with vulnerability management and security automation.
• Familiarity with Linux administration and scripting.

Preferred Qualifications

• Experience with SOAR platforms and automated incident response.
• Knowledge of security frameworks such as NIST, CIS, ISO 27001, or SOC 2.
• Experience with Kubernetes security tools and policy engines.
• Cloud security certifications (AWS Security Specialty, Azure Security Engineer, GCP Security Engineer).
• Security certifications such as CISSP, CISM, CEH, or GIAC.
• Experience with GitOps methodologies and modern platform engineering practices.