DevSecOps Engineer

Security Engineering & Automation:

• Secure SDLC Integration: Embed security into CI/CD pipelines by implementing secure controls.
• Vulnerability Management: Lead the process of vulnerability and patch management, automating discovery, prioritization, and remediation.
• Platform Hardening: Strengthen cloud and Kubernetes environments through secure configurations.

Resilience, Detection, and Response:

• Cyber Resilience: Own and validate cyber-resiliency standards through secure rehearsals.
• Security Deployment: Develop secure deployment patterns, such as canary rollouts and automated safe rollbacks.
• Detection & Forensics: Improve detection and response capabilities by building high-signal alerts.

Architecture, Identity, and Governance:

• Design & Threat Modeling: Conduct security reviews and threat modeling for all new services and major architecture changes.
• Identity & Access Management (IAM): Strengthen the identity and access model by enforcing the principle of least privilege.
• Compliance & Audit: Support compliance and audit readiness by operationalizing security controls.