Senior DevSecOps Engineer

What You Will Do

• Design, build, and maintain CI/CD pipelines using GitHub Actions, GitLab CI, or Jenkins that embed security scanning, automated testing, and compliance checks into every deployment.
• Implement shift-left security by integrating SAST, DAST, SCA, and container scanning tools such as Snyk, SonarQube, Checkmarx, or Trivy into development workflows.
• Write and maintain automated test suites — unit, integration, API, and end-to-end — using frameworks such as Playwright, Cypress, Selenium, or Pytest.
• Manage Infrastructure-as-Code testing and validation using Terraform, Terratest, or Checkov to ensure changes are secure and compliant before deployment.
• Build automated security compliance reporting and vulnerability-tracking dashboards for client security and engineering leadership.
• Conduct code review and security audits to enforce secure coding practices, dependency hygiene, and secrets management.
• Collaborate with international engineering and security teams to define quality gates, SLA metrics, and release-readiness criteria.

What We’re Looking For

• 4+ years of DevSecOps, security engineering, or QA automation experience.
• Hands-on proficiency with CI/CD pipeline design using GitHub Actions, GitLab CI, or equivalent, including multi-stage workflows and reusable pipeline templates.
• Experience integrating security scanning tools (SAST/DAST/SCA) such as Snyk, SonarQube, or Trivy into automated pipelines.
• Strong programming skills in Python, JavaScript/TypeScript, or Go for test automation and tooling.
• Experience with Infrastructure as Code (Terraform, Pulumi, or CloudFormation) and infrastructure testing frameworks.
• Flawless English communication skills to present security findings and quality metrics to engineering leadership.