Jobs → Engineering → DevSecOps Engineer

About the Role We are looking for a DevSecOps Engineer to join our team in the telecommunications industry. This role involves integrating security practices into the DevOps lifecycle. Key Responsibilities • Implement and maintain security practices in CI/CD pipelines • Manage cloud security and IAM best practices on AWS/GCP • Conduct security testing using SAST, DAST, SCA, and container scanning • Monitor and manage vulnerabilities • Ensure compliance with OWASP Top 10 and secure coding practices Requirements • 1–2 years of experience in DevOps, Cloud Engineering, or DevSecOps • Knowledge of AWS/GCP cloud security and IAM best practices • Hands-on experience with CI/CD pipelines (GitLab CI/CD, Jenkins, or GitHub Actions) • Familiar with SAST, DAST, SCA, container scanning, and security gates • Knowledge of Docker, Kubernetes (EKS/GKE), Terraform, and Infrastructure as Code (IaC) • Understanding of OWASP Top 10, vulnerability management, and secure coding practices • Familiar with security tools such as SonarQube, Trivy, Burp Suite, or equivalent • Strong problem-solving, troubleshooting, automation, and communication skills • Experience with Spec-Driven Development (SDD) and AWS/GCP certification is a plus