Devops Security Consultant

Key Responsibilities:• Embed security practices into CI/CD pipelines• Perform secure code reviews and automate security testing (SAST, DAST, SCA)• Manage and improve cloud security posture (AWS/Azure/GCP)• Implement container and Kubernetes security best practices• Monitor systems for vulnerabilities, threats, and compliance issues• Collaborate with DevOps teams to ensure secure infrastructure as code (IaC)• Conduct risk assessments and threat modeling• Automate security controls and compliance checks• Respond to security incidents and perform root cause analysisRequired Skills & Qualifications• Bachelor’s degree in Computer Science, Cybersecurity, or related field• 3–7+ years of experience in DevOps/Security roles• Strong understanding of:• CI/CD tools (Jenkins, GitHub Actions, GitLab CI)• Cloud platforms (AWS, Azure, GCP)• Containers & orchestration (Docker, Kubernetes)Experience with security tools:• SAST (e.g., SonarQube, Checkmarx)• DAST (e.g., OWASP ZAP, Burp Suite)• Dependency scanning tools• Knowledge of scripting (Python, Bash, or Go)• Familiarity with Infrastructure as Code (Terraform, CloudFormation)• Understanding of security frameworks (OWASP Top 10, NIST, CIS benchmarks)Preferred QualificationsCertifications like:• AWS Certified Security Specialty• Certified Kubernetes Security Specialist (CKS)• CISSP / CEH• Experience with secrets management tools (HashiCorp Vault, AWS Secrets Manager)• Knowledge of compliance standards (ISO 27001, SOC 2, GDPR)Soft Skills• Strong problem-solving mindset• Excellent communication and collaboration skills• Ability to work in cross-functional teams• Attention to detail with a security-first mindset• Nice-to-Have• Experience with Zero Trust architecture• Familiarity with runtime security tools (Falco, Aqua Security)• Experience in fintech, healthcare, or regulated environments