DevOps Security Consultant

Key Responsibilities: • Embed security practices into CI/CD pipelines • Perform secure code reviews and automate security testing (SAST, DAST, SCA) • Manage and improve cloud security posture (AWS/Azure/GCP) • Implement container and Kubernetes security best practices • Monitor systems for vulnerabilities, threats, and compliance issues • Collaborate with DevOps teams to ensure secure infrastructure as code (IaC) • Conduct risk assessments and threat modeling • Automate security controls and compliance checks • Respond to security incidents and perform root cause analysis Required Skills & Qualifications • Bachelor’s degree in Computer Science, Cybersecurity, or related field • 3–7+ years of experience in DevOps/Security roles • Strong understanding of: • CI/CD tools (Jenkins, GitHub Actions, GitLab CI) • Cloud platforms (AWS, Azure, GCP) • Containers & orchestration (Docker, Kubernetes) Experience with security tools: • SAST (e.g., SonarQube, Checkmarx) • DAST (e.g., OWASP ZAP, Burp Suite) • Dependency scanning tools • Knowledge of scripting (Python, Bash, or Go) • Familiarity with Infrastructure as Code (Terraform, CloudFormation) • Understanding of security frameworks (OWASP Top 10, NIST, CIS benchmarks) Preferred Qualifications Certifications like: • AWS Certified Security Specialty • Certified Kubernetes Security Specialist (CKS) • CISSP / CEH • Experience with secrets management tools (HashiCorp Vault, AWS Secrets Manager) • Knowledge of compliance standards (ISO 27001, SOC 2, GDPR) Soft Skills • Strong problem-solving mindset • Excellent communication and collaboration skills • Ability to work in cross-functional teams • Attention to detail with a security-first mindset • Nice-to-Have • Experience with Zero Trust architecture • Familiarity with runtime security tools (Falco, Aqua Security) • Experience in fintech, healthcare, or regulated environments