Integrate security tools and practices into CI/CD pipelines.
Automate security scans (SAST, DAST, SCA, container security etc.).
Conduct threat modelling and security assessments on infrastructure and applications.
Develop and enforce security best practices across development and deployment settings.
Collaborate with development and operations teams to remediate vulnerabilities.
Manage and monitor infrastructure-as-code (IaC) with security in mind (e.g., Terraform, CloudFormation).
Practical experience designing, developing, and maintaining CI/CD pipelines with GitHub Actions and/or Jenkins.
Experience writing and optimizing automation for build, deployment, and ops tasks using shell scripting and Linux commands.
Experience with containers and orchestration: Docker and Kubernetes.
Experience in software development and infrastructure development is a plus.
Experience with Git and Artifact management (e.g., Artifactory, Docker Trusted Registry).
Support compliance initiatives (e.g., SOC2, ISO 27001, PCI-DSS).
Stay up to date with the latest security threats, vulnerabilities, and technologies.

📌 Devsecops Navi Mumbai
🏢 ERM Placement Services
📍 Navi Mumbai