Devsecops Engineer

Key responsibilities

• Integrate security into CI/CD: SAST/DAST/SCA, secrets management, IaC scanning and policy-as-code.

• Perform application security reviews, threat modeling and remediation guidance with engineering teams.

• Harden AWS cloud infrastructure and build security automation and internal tooling.

• Triage vulnerabilities and drive remediation across services.

Skills

• AWS • Python

• Cloud security on AWS (IAM, networking, guardrails); Python for security automation and tooling; familiarity with SQL for data/log analysis is expected.

• DevSecOps tooling (Snyk, Checkmarx, Trivy, etc.) and IaC (Terraform).

• Container/Kubernetes security.

• Certifications (e.g., AWS Security, OSCP, CISSP).

• HITRUST / SOC 2 / HIPAA controls experience.