DevSecOps Engineer

Description

A leading financial institution is seeking a DevSecOps Engineer to enhance application security across its technology portfolio. Reporting to the CISO, this role supports a regulatory initiative focused on embedding secure practices into CI / CD pipelines and modern development workflows. Success means measurable improvements in vulnerability management, container security, and developer awareness.

What You’ll Tackle

• Conduct application security assessments including SAST, SCA, DAST, and penetration testing.
• Partner with engineering teams to perform threat modeling and integrate security controls.
• Build and maintain CI / CD pipelines with embedded security gates and testing tools.
• Configure and manage security platforms (e.g., Checkmarx, Qualys, JFrog Xray, Twistlock).
• Evaluate and enhance container and runtime security in Kubernetes / OpenShift environments.
• Provide developer training on secure coding practices.
• Document findings, remediation plans, and compliance alignment.
• Collaborate with IT, compliance, and DevOps teams to improve overall security posture.

What You Bring