Senior Software Engineer - DevSecOps

Design, implement, and maintain secure DevSecOps pipelines across development and deployment environments.
Integrate security tools into CI/CD pipelines to automate vulnerability detection and remediation.
Perform vulnerability assessments and manage remediation activities for applications, infrastructure, containers, and cloud environments.
Conduct Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Infrastructure as Code (IaC) security scans.
Collaborate with development, infrastructure, and security teams to remediate identified vulnerabilities.
Implement and enforce secure coding practices and DevSecOps best practices.
Manage container and Kubernetes security, including image scanning and runtime security.
Monitor security events, identify risks, and recommend mitigation strategies.
Support security audits, compliance initiatives, and risk assessments.
Automate security reporting, compliance checks, and policy enforcement.
Participate in incident response and security investigations when required.
Mentor junior engineers and promote security awareness across engineering teams.