DevSecOps Engineer
usource
Job Description
- Design and implement enterprise-scale DevSecOps practices across CI/CD pipelines.
- Integrate security testing, scanning, and quality gates into software delivery workflows through GitLab.
- Drive shift-left security by embedding DevSecOps controls early in the development lifecycle.
- Apply Agentic AI approaches to support secure coding, code review, vulnerability detection, remediation recommendations, and security automation.
- Assess AI-generated code for security risks and compliance requirements.
- Establish and maintain security policies and standards supporting DevSecOps and AI-assisted development.
- Lead vulnerability identification, prioritization, remediation tracking, and risk reporting within DevSecOps workflows.
- Develop security dashboards, KPIs, and governance metrics to measure application security maturity.
- Partner with architects, engineering teams, and developers to remediate high-risk vulnerabilities and improve application security posture.
- Provide guidance and training to development teams on secure development practices and emerging security threats.