Senior DevSecOps Engineer.

Tasks

• Automate continuous integration and continuous delivery security
• Conduct penetration testing
• Define secure coding standards and mentor teams
• Design and implement security solutions across SDLC
• Develop incident response plans and post mortems
• Monitor and alert for security incidents
• Perform threat modeling and vulnerability assessments
• Remediate application and infrastructure vulnerabilities
• Support compliance for SOC 2 ISO 27001 and GDPR

Perks/Benefits

• Annual retreat
• Flexible hours
• Generous PTO
• Guaranteed rest periods
• Learning allowance
• Overtime pay
• Remote work
• Standby Pay
• Wellness allowance

Skills/Tech-stack

API Security | AWS | Attack prevention | Authentication | CI/CD | Container Security | Credential Stuffing Prevention | DAST | DDoS Protection | DevSecOps | Firewall Management | GitHub Actions | IAM | Incident Response | Infrastructure as Code | Injection attack prevention | Jenkins | Kubernetes | Network Security | Network Segmentation | OWASP Top | OWASP Top 10 | Penetration Testing | SAST | SDLC | Secure Coding | Security monitoring | Terraform | Threat modeling | Top 10 | VPN | Vulnerability Assessment | Zero Trust | “as-code”