DEVSECOPS & APPLICATION SECURITY

Key Responsibilities

• Security by Design : Embed security requirements into CI / CD pipelines, infrastructure-as-code (IaC), and application architectures.
• Automation & Tooling : Configure and maintain security scanning tools (SAST, DAST, SCA, container scanners) within automated build and deployment workflows.
• Vulnerability Management : Triage, prioritize, and remediate vulnerabilities discovered in code, containers, and cloud environments; drive fixes and track metrics.
• Incident Response Support : Assist in investigation of security incidents related to applications or infrastructure; write playbooks and run tabletop exercises.
• Infrastructure Security : Implement and enforce secure configuration and hardening standards for cloud platforms (AWS, Azure, GCP) and Kubernetes clusters.
• Policy & Compliance : Define, document, and enforce security policies, standards, and guidelines aligned with industry frameworks (OWASP, CIS Benchmarks, NIST).
• Threat Modeling & Risk Assessment : Lead or participate in threat modeling sessions for new features; provide risk-based recommendations.
• Training & Evangelism : Conduct security awareness workshops for developers and DevOps teams; champion "shift-left" security culture.

Required Qualifications

Preferred Qualifications