About the role
As a DevSecOps staff engineer, you'll be the guardian of our cloud infrastructure, building security into every layer of our development lifecycle. You'll architect secure CI/CD pipelines, automate security controls, and empower teams to ship faster without compromising safety.
Responsibilities:
- Design and maintain bulletproof CI/CD pipelines with security baked in from day one.
- Integrate cutting-edge security tools (SAST, DAST, SCA) to automate threat detection.
- Implement robust security controls across AWS/GCP, including IAM, container security, and encryption.
- Champion DevSecOps culture by mentoring engineers and driving architectural improvements.
- Stay ahead of emerging threats and evolve our security posture continuously.
Requirements:
- 10+ years of industry experience with deep AWS expertise.
- GCP Certified Security Specialist.
- Hands-on experience implementing SAST, DAST, and penetration testing.
- 5+ years architecting secure GCP cloud solutions (EC2 RDS, S3 VPC, and CloudWatch).
- Strong CI/CD expertise (GitHub Actions, Jenkins).
- OWASP Top 10 knowledge at your fingertips.
- Proficiency in Python or Bash scripting.
- Kubernetes/Docker orchestration experience.
Bonus Points:
- GCP Certified DevOps Engineer.
- Experience with Terraform, Ansible, Chef, or Puppet.
- Observability tool expertise (CloudWatch, New Relic).
- Windows/Linux system administration.