DevSecOps Engineer - Application Security

Job Description:

We are looking for a DevSecOps Engineer to strengthen application security across our SaaS platform. This is a senior individual contributor role responsible for designing, implementing, and continuously improving DevSecOps practices across engineering teams and business units.

Key Responsibilities:

• Design and implement DevSecOps practices across software development and CI/CD pipelines.
• Integrate application security controls and automated security testing into CI/CD workflows.
• Identify and address application security vulnerabilities across the software development lifecycle.
• Implement security scanning for source code, dependencies, containers, and other application components.
• Work with engineering teams to improve secure coding practices and vulnerability remediation.
• Establish and monitor security standards based on OWASP and industry best practices.
• Support Azure DevOps environments and integrate security tools into development workflows.
• Drive continuous improvement of application security processes, controls, and DevSecOps maturity.

Required Candidate Profile:

• Hands-on experience in DevSecOps and Application Security.
• Strong understanding of secure SDLC and CI/CD security practices.
• Experience with security testing and vulnerability management.
• Good knowledge of OWASP application security principles.
• Experience with Azure DevOps and CI/CD pipelines.
• Understanding of cloud and SaaS security concepts.
• Strong problem-solving and communication skills.