DevSecOps Developer - CI/CD Pipeline (8-10 yrs)

Job Title : DevSecOps Developer

Experience : 8+ years

Location : Remote

Employment Type : Full-time/freelencer

Job Description :

We are seeking an experienced DevSecOps Developer with strong expertise in Python, DevOps, and databases. The ideal candidate will be responsible for integrating security into the development lifecycle, automating infrastructure, and ensuring compliance with security best practices.

Key Responsibilities :

DevSecOps Implementation :

- Embed security practices into the CI/CD pipeline and SDLC.

- Implement security controls, compliance checks, and vulnerability scanning.

- Automate security testing using tools like Snyk, SonarQube, or Checkmarx.

Python Development :

- Develop automation scripts and tools to enhance DevSecOps workflows.

- Build security monitoring and incident response automation.

- Work with APIs and integrations for security tools.

DevOps & Infrastructure :

- Manage and optimize CI/CD pipelines using Jenkins, GitLab CI/CD, or Azure DevOps.

- Work with Docker, Kubernetes, Terraform, and Ansible for infrastructure automation.

- Ensure compliance with cloud security best practices (AWS, Azure, GCP).

Database Security & Management :

- Secure SQL and NoSQL databases (PostgreSQL, MySQL, MongoDB, etc.).

- Implement database encryption, auditing, and monitoring.

- Optimize database performance and automate maintenance tasks.

Requirements :

- 8+ years of experience in DevSecOps, DevOps, or Security Engineering.

- Strong proficiency in Python for automation and scripting.

- Hands-on experience with CI/CD tools, cloud platforms (AWS/Azure/GCP), and security practices.

- Expertise in database security, SQL performance tuning, and backup strategies.

- Experience with container security (Kubernetes, Docker).

- Knowledge of OWASP, security compliance standards (SOC2, ISO27001, NIST).

Nice to Have :

- Experience with SIEM tools (Splunk, ELK, Datadog).

- Familiarity with Secrets Management (Vault, AWS Secrets Manager).

- Exposure to serverless security (Lambda, Azure Functions).