DevSecOps Engineer

This role sits at the intersection of DevOps, Security Engineering, and platform enablement. You’ll help development teams build and maintain secure delivery pipelines, improve security maturity across the SDLC, and drive standardization across multiple teams and repositories.

This is a highly hands-on role with strong operational ownership. You’ll work closely with engineering teams to integrate security tooling into CI/CD workflows, secure containerized environments, troubleshoot pipeline issues, and continuously improve DevSecOps practices across the organization.

You might be our missing piece if you have

• 2–4+ years of experience in DevOps, DevSecOps, Security Engineering, or similar roles

• Hands-on experience building and maintaining CI/CD pipelines in Azure DevOps

• Strong knowledge of Docker and containerized environments

• Experience with Kubernetes and Infrastructure as Code tools such as Terraform

• Good understanding of security fundamentals, vulnerability management, and secure SDLC practices

• Experience integrating security tooling into pipelines (SAST, SCA, container scanning, IaC scanning)

• Familiarity with cloud security concepts in Azure environments

• Experience working with YAML pipelines and reusable templates

• Strong troubleshooting and debugging skills in CI/CD and infrastructure environments

• Excellent communication skills and the ability to collaborate with multiple engineering teams

• A resilient and ownership-oriented mindset

We’d be thrilled if you also have

• Exposure to AppSec practices such as threat modeling and remediation guidance

• Experience with tools such as Aqua Security, SonarCloud, BlackDuck

• Experience with SBOM generation and supply chain security concepts

What we’ll be working on together

• Secure CI/CD & Pipeline Engineering

• Docker & Container Security

• Cloud & Infrastructure Security working with Azure, Kubernetes, and Terraform-based environments

• Security Operations & Enablement supporting teams when pipelines, scanners, or integrations fail

• AppSec & Security Maturity - participating in threat modeling and security reviews