Secure AWS/GCP workloads including EC2, ECS, S3, RDS, VPC, IAM, and associated managed services
Harden Linux/Windows servers, VMware environments, PostgreSQL databases, and storage systems (LVM/EBS/S3)
Design and enforce VPC/subnet segmentation, firewall rules, and zero-trust access patterns
Implement encryption standards, access controls, data lifecycle policies, and secure configuration baselines
Drive IAM/PAM governance, access reviews, and least-privilege enforcement across cloud and on-premise environments
Manage and operate SAST, DAST, and SCA tooling integrated into CI/CD pipelines
Deploy and own new AppSec standards across the engineering organization
Conduct hands-on security code reviews across Ruby on Rails, C#, Java, Python, and Go codebases
Lead threat modeling sessions for new features, services, and architectural changes
Run developer security awareness and training initiatives to build a security-first engineering culture
Own the vulnerability disclosure and bug triage process end-to-end.

4–5 years of experience in cloud or infrastructure security
Strong, hands-on cloud security experience in AWS or GCP production environments
Hands-on application security experience: managing SAST/DAST/SCA tooling, conducting code reviews, and working directly with development teams
Demonstrated ability to define and deploy security standards
Familiarity with common security vulnerabilities in web frameworks—experience with Ruby on Rails or C# is a strong advantage
Solid grounding in network security, OS hardening, IAM/PAM, and database security
Familiarity with OWASP Top 10 and CIS Benchmarks
Comfortable working cross-functionally with engineering, SRE, and infrastructure teams
Able to communicate security risk clearly to both technical and non-technical audiences.

DevSecOps Engineer

Key skills