DevSecOps Engineer – Cloud Security & Automation (Hybrid)

About the role

We are seeking a hands‑on DevSecOps Engineer to join our platform and security engineering function. The role focuses on building secure, cloud‑native platforms, embedding security automation, and driving shift‑left practices across CI/CD pipelines and infrastructure.

Key responsibilities

• Define and implement security strategy for cloud and platform environments.
• Embed zero‑trust, least‑privilege, and AWS Well‑Architected best practices into design.
• Act as the primary technical security liaison between engineering, CISO, and governance teams.
• Integrate automated security testing, compliance checks, and security gates into CI/CD pipelines.
• Develop and maintain security automation for the software delivery lifecycle.
• Champion Infrastructure as Code security using Terraform, Ansible, and Helm.
• Lead vulnerability management, remediation, and threat‑detection processes.
• Support SAST, DAST, penetration testing, and SIEM‑based monitoring solutions.
• Provide visibility through metrics, reporting, and observability dashboards.
• Build proofs‑of‑concept and contribute code to solve security engineering challenges.

Required profile

• Proven experience in DevSecOps, platform security, or security engineering.
• Hands‑on expertise with AWS cloud environments and secure configuration.
• Strong background in Infrastructure as Code and CI/CD automation.
• Deep understanding of security frameworks such as OWASP Top 10, CIS Benchmarks, and PCI DSS v4.
• Experience with vulnerability management, threat detection, and remediation.

Required skills

• AWS
• Terraform
• Ansible
• Helm
• GitHub Actions
• Bitbucket Pipelines
• Linux
• Windows
• OWASP Top 10
• CIS Benchmarks
• PCI DSS v4
• SAST
• DAST
• Penetration testing
• SIEM
• Vulnerability management
• Threat detection
• Remediation