DevSecOps  

What You’ll Be Doing:

• Infrastructure & Application Security: Mitigate security risks, enforce least privilege access, and secure containerized environments.
• Security Automation: Implement security policies in CI/CD pipelines and integrate testing tools like SAST and DAST.
• Identity & Access Management: Manage IAM, implement MFA, and monitor user activity.
• CI/CD Pipeline Security: Secure software supply chains and scan dependencies for vulnerabilities.
• Data Security & Logging: Configure log analysis and SIEM tools, enforce data retention policies.
• Vulnerability Management & Incident Response: Conduct vulnerability assessments, manage incident responses, and disaster recovery.
• Compliance & Audits: Align with frameworks like ISO 27001, GDPR, and PCI-DSS, and prepare for audits.
• Documentation & Policy Management: Maintain security policies, conduct audits, and implement training programs.

How Your Success is Measured:

• Compliance Audit Scores: Improve ISO 27001 audit scores and reduce non-compliance findings.
• Security Incident Reduction: Reduce security incidents by 20-30% annually.
• Risk Management Maturity: Decrease high-risk vulnerabilities by 25%.
• Incident Response Time: Reduce MTTR by 20%.
• Employee Security Awareness: Achieve 95% participation in security training.
• Regulatory Compliance: Maintain 100% compliance with ISO 27001 and related frameworks.

• Minimum of 3 years of experience in DevSecOps or similar role.
• Experience with tools like GitLab CI/CD, Terraform, Kubernetes, Docker, and SIEM.
• Expertise in security tools such as SonarQube, Trivy, Vault.
• Strong understanding of ISO 27001.
• Proficiency in scripting (Bash, Python).