DevSecOps Engineer
Sheila NataIndonesiaJUNIORPosted 8d ago
AWSGCPCI/CDGitLab CI/CDJenkinsGitHub ActionsSASTDASTSCADockerKubernetesEKSGKETerraformInfrastructure as CodeOWASP Top 10Vulnerability ManagementSecure CodingSonarQubeTrivyBurp SuiteSpec-Driven Development
About the Role
We are looking for a DevSecOps Engineer to join our team in the telecommunications industry. This role involves integrating security practices into DevOps processes.
Key Responsibilities
• Implement security best practices in cloud environments
• Manage CI/CD pipelines with security considerations
• Conduct security testing and vulnerability assessments
• Monitor and respond to security incidents
• Automate security processes and tools
Requirements
• 1–2 years of experience in DevOps, Cloud Engineering, or DevSecOps
• Knowledge of AWS/GCP cloud security and IAM best practices
• Hands-on experience with CI/CD pipelines (GitLab CI/CD, Jenkins, or GitHub Actions)
• Familiar with SAST, DAST, SCA, container scanning, and security gates
• Knowledge of Docker, Kubernetes (EKS/GKE), Terraform, and Infrastructure as Code (IaC)
• Understanding of OWASP Top 10, vulnerability management, and secure coding practices
• Familiar with security tools such as SonarQube, Trivy, Burp Suite, or equivalent
• Strong problem-solving, troubleshooting, automation, and communication skills
• Eager to learn, collaborate, and continuously improve
• Experience with Spec-Driven Development (SDD) and AWS/GCP certification is a plus