Security Engineer (Devsecops)

About the Role This role focuses on embedding security directly into the software development lifecycle to enable secure, scalable, and efficient delivery. You will partner closely with engineering teams to automate security controls, reduce vulnerabilities, and strengthen secure-by-design practices across cloud-native environments. Key Responsibilities • Design and implement automated security controls in CI/CD pipelines, including SAST, DAST, and SCA, to proactively block critical vulnerabilities • Collaborate with engineering teams to triage security findings and provide practical, code-level remediation guidance • Integrate and optimize security tooling within CI/CD platforms such as GitHub Actions, GitLab CI, or Jenkins • Configure and fine-tune security scanning tools to reduce false positives and improve signal quality • Develop and maintain secure-by-default templates, including hardened container images and Infrastructure as Code modules • Advocate for and enforce secure development standards across applications and cloud environments • Deliver security awareness sessions, workshops, and training programs to enhance developer security expertise • Partner with stakeholders to continuously improve secure engineering practices and processes Required Qualifications • Proficiency in at least one programming language such as Python, Go, Java, or JavaScript/Node.js, with hands-on coding capability • Strong experience with CI/CD platforms and integrating security tooling into development workflows • Practical knowledge of cloud platforms such as AWS and/or Azure • Experience with Infrastructure as Code tools such as Terraform or CloudFormation • Familiarity with security scanning tools such as Snyk, SonarQube, Wiz, Checkmarx, or OWASP ZAP • Solid understanding of application security principles and common vulnerabilities (e.g., OWASP Top 10) • Proven ability to collaborate effectively with engineering teams and influence secure development practices Preferred Qu…