DevSecOps Engineer
Responsibilities:
-
Secure CI/CD and delivery infrastructure (runners, pipelines, build environment)
-
Implement and enforce supply chain security controls in collaboration with AppSec
-
Build and evolve AWS cloud security practices
-
Improve network-level security (segmentation, service-to-service communication, attack surface reduction)
-
Develop and strengthen security controls in GitLab CI
-
Implement IaC security (scanning in CI/CD and support manual IaC reviews)
-
Develop misconfiguration management practices
-
Work hands-on with Prisma Cloud (co-ownership)
-
Contribute to Kubernetes security (Kyverno, policies)
-
Participate in incident response, investigations, and postmortems
-
Drive adoption of security practices across DevOps teams
Requirements:
-
3+ years in InfraSec / DevSecOps (not pure DevOps or AppSec)
-
Strong hands-on experience with AWS security
-
Strong hands-on experience with Kubernetes security
-
Understanding of network security in cloud/Kubernetes environments
-
Experience securing CI/CD and software delivery pipelines
-
Experience with IaC security (scanning and/or review)
-
Experience building or improving InfraSec / DevSecOps processes
-
Ability to drive changes and influence engineering teams
-
Ability to work in non-ideal, evolving environments
-
Risk-based mindset (ability to prioritize based on real impact)
Nice to have:
-
Experience with Prisma Cloud
-
Experience in crypto / fintech environments
-
Experience with automation (Python or similar)
-
Strong risk assessment and decision-making skills
