About the Role
You will ensure security controls execute reliably across CI/CD and cloud delivery workflows. You will integrate security scans, enforce policy-as-code gates, monitor control health, maintain security metrics and evidence, collaborate on deployment security, support control-failure investigations, and maintain runbooks and operational workflows.
Requirements
•Three or more years of experience in DevSecOps, security engineering, or CI/CD automation
•Experience with Azure DevOps, GitHub Actions, or Jenkins
•Experience integrating security scanning tools into pipelines
•Knowledge of Terraform, Bicep, or ARM validation
•Experience with Python, PowerShell, or Bash scripting and automation
•Understanding of cloud-native security concepts and delivery pipelines
•Familiarity with ISO 27001 and SOC 2
Responsibilities
•Integrate and maintain automated security controls in CI/CD pipelines
•Enforce security gates and policy-as-code validations across delivery stages
•Ensure security checks are not skipped or bypassed
•Monitor security control execution and detect failures or misconfigurations
•Maintain dashboards and metrics for security control execution
•Collaborate with AppSec to ensure security scans execute correctly
•Collaborate with CloudSec to enforce cloud security policies during deployments
•Support investigations of control failures or pipeline bypasses
•Maintain automated security evidence for audit purposes
•Develop and maintain SSRE runbooks, control definitions, and operational workflows
Benefits
•Hybrid work schedule with 3 days on-site and 2 days remote
