DevOps & Security Engineer
About The Position
This role focuses on designing, building, and maintaining scalable automation frameworks for web, API, and backend systems. It involves integrating automated tests into CI/CD pipelines to enhance regression coverage and release confidence, as well as supporting release validation and production readiness for digital platforms. The position also requires developing supporting tools to improve test execution, reporting, and reliability, and evaluating emerging tools in security and automation. Additionally, the role involves identifying, triaging, and remediating vulnerabilities across applications, cloud environments, and infrastructure, integrating security testing into CI/CD pipelines, and detecting and resolving cloud misconfigurations and security risks. Promoting secure coding practices, supporting audit and compliance initiatives, implementing secrets management, and monitoring for vulnerabilities are also key responsibilities. Collaboration with engineering teams on incident response and root cause analysis is expected.
Requirements
- Bachelor's degree in Computer Science, Engineering, or related field (or equivalent experience)
- 3+ years of experience in security engineering, test automation
- Experience building or maintaining automation frameworks (e.g., Selenium, Playwright, Cypress, Rest Assured)
- Strong hands-on experience with CI/CD tools (e.g., Jenkins, GitHub Actions, GitLab CI, Azure DevOps)
- Experience with security testing tools (e.g., Snyk, Burp Suite, OWASP ZAP, etc.)
- Proficiency in at least one programming language (Java, Python, or JavaScript)
- Solid understanding of application security fundamentals and common vulnerabilities
- Experience working with cloud platforms (AWS, Azure)
Responsibilities
- Design, build, and maintain scalable automation frameworks for web, API, and backend systems
- Integrate automated tests into CI/CD pipelines to improve regression coverage and release confidence
- Support release validation and production readiness for digital platforms
- Develop supporting tools to improve test execution, reporting, and reliability
- Evaluate and conduct proof-of-concepts for emerging tools in security and automation
- Contribute to best practices, standards, and lightweight governance for engineering tools
- Promote knowledge sharing, documentation, and cross-team collaboration
- Identify, triage, and remediate vulnerabilities across applications, cloud environments, and infrastructure
- Integrate security testing into CI/CD pipelines (SAST, DAST, software composition analysis, container scanning)
- Detect and resolve cloud misconfigurations and security risks
- Enforce secure coding practices and shift-left security aligned with OWASP principles
- Support audit and compliance initiatives, including PCI-DSS and internal security reviews
- Implement and support secrets management and secure access controls (IAM, least privilege)
- Monitor applications, infrastructure, and pipelines for vulnerabilities and anomalies
- Drive patching, remediation, and infrastructure hardening efforts
- Collaborate with engineering teams on incident response, debugging, and root cause analysis
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
