Secure DevOps Engineer

Job Title: Secure DevOps Engineer

Department: Cybersecurity / DevSecOps

Employment Type: Full-Time

Experience Level: Mid to Senior (5+ Years)

Job SummaryWe are seeking a talented and motivated Secure DevOps Engineer to join our cybersecurity team. This role combines deep expertise in cybersecurity with a solid foundation in software development and DevOps practices. The ideal candidate will be responsible for embedding security throughout the development lifecycle, managing vulnerabilities, and ensuring secure deployment processes using Azure DevOps.

Key ResponsibilitiesIntegrate security best practices into DevOps pipelines using Azure DevOps.
Collaborate with development and operations teams to implement and monitor secure coding standards and security policies.
Conduct and support threat modeling, penetration testing, risk assessments, and vulnerability management.
Develop and maintain security-related scripts and tools using C#, PowerShell, or other scripting languages.
Lead efforts to document secure development practices, process workflows, and incident response protocols.
Serve as a subject matter expert in secure development lifecycle (SDLC) and DevSecOps methodologies.
Communicate security risks and solutions effectively to both technical and non-technical stakeholders.
Required Skills & ExperienceCybersecurity Expertise: Advanced knowledge of security principles, standards, and frameworks (e.g., OWASP, NIST, ISO 27001).
Programming/Scripting: Strong skills in C# and PowerShell for automation and security tooling.
Azure DevOps: Hands-on experience managing Azure DevOps pipelines and integrating security work items.
Agile Methodologies: Experience working in Agile teams, delivering secure software within sprints.
Security Testing: Proven background in penetration testing, threat modeling, and vulnerability assessments.
Communication: Ability to translate technical security concepts into actionable business-friendly recommendations.
Preferred QualificationsBachelor's or Master's degree in Computer Science, Information Security, or a related field.
Certifications such as CEH, CISSP, OSCP, or Microsoft Security certifications are a plus.
Familiarity with DevSecOps tools like SonarQube, Checkmarx, Veracode, or Aqua Security.
Soft SkillsStrong analytical and problem-solving abilities.
Excellent verbal and written communication.
Ability to work independently and as part of a cross-functional team.
Proactive mindset with a focus on continuous improvement.