- Integrate security tools and practices into CI/CD pipelines.

- Automate security scans (SAST, DAST, SCA, container security etc.).

- Conduct threat modelling and security assessments on infrastructure and applications.

- Develop and enforce security best practices across development and deployment environments.

- Collaborate with development and operations teams to remediate vulnerabilities.

- Manage and monitor infrastructure-as-code (IaC) with security in mind (e.g., Terraform, CloudFormation).

- Practical experience designing, developing, and maintaining CI/CD pipelines with GitHub Actions and/or Jenkins.

- Experience writing and optimizing automation for build, deployment, and ops tasks using shell scripting and Linux commands.

- Experience with containers and orchestration: Docker and Kubernetes.

- Experience in software development and infrastructure development is a plus.

- Experience with Git and Artifact management (e.g., Artifactory, Docker Trusted Registry).

- Support compliance initiatives (e.g., SOC2, ISO 27001, PCI-DSS).

- Stay up to date with the latest security threats, vulnerabilities, and technologies.

📌 DevSecOps (Mumbai)
🏢 ERM Placement Services
📍 Mumbai