Overview
Build security into delivery pipelines and platforms: scanning, secrets, policy as code and hardened containers.
What you'll do
- Build and run security scanning in CI/CD (SAST, SCA, DAST, container images and infrastructure as code) and tune it to keep false positives low
- Move scanners from advisory to build-blocking in stages with delivery teams, so security gates are adopted rather than bypassed
- Manage secrets and policy as code across pipelines and environments
- Secure the pipeline itself: build agents, runners, pipeline definitions and access to them
- Harden container images and cluster configuration through the pipeline
- Triage vulnerabilities with engineering teams and track remediation to closure
- Set the security standards and guardrails delivery teams build against
What you bring
- Hands-on DevSecOps or DevOps experience
- CI/CD tooling such as GitHub Actions, GitLab CI or Azure DevOps
- SAST, SCA and secrets scanning such as SonarQube, Snyk or GitLeaks
- Container scanning such as Trivy or Prisma Cloud
- Containers and Kubernetes
- Infrastructure as code
You don't need every item on this list. If most of it fits, send your CV.
Nice to have
- Cloud security certifications
- Threat modelling
- Regulated-environment experience