DevSecOps Engineer

The Role

We re seeking a security professional with 4-6 years of experience in securing cloud infrastructure, automating compliance processes, and managing risks to support SOC 2, ISO 27001, and GDPR standards. This role emphasizes integrating security into CI/CD pipelines, mitigating vulnerabilities, and ensuring AWS environments maintain the highest security benchmarks.

Key Responsibilities

• Integrate security measures within AWS CI/CD pipelines (e.g., Code Pipeline, Code Build, Code Deploy). Manage Infrastructure as Code (IaC) using Terraform and CloudFormation with encryption and least privilege principles.

• Deploy and monitor AWS security tools such as GuardDuty, WAF, Shield, Security Hub, and Inspector. Ensure container security across ECS/EKS environments.

• Automate vulnerability management, patching, and antimalware solutions. Enforce robust IAM policies, SSO, MFA, and secrets management practices.

• Support SOC 2, ISO 27001, and GDPR compliance audits and risk assessments. Implement and manage monitoring and logging tools like CloudWatch, CloudTrail, and SIEM systems.

• Develop risk management frameworks and automate incident response processes. Draft, review, and implement cybersecurity and information security policies.

• Collaborate with stakeholders to ensure readiness of controls for non-security domains such as HR systems, application infrastructure, and data engineering infrastructure.