Automate security across build, test, release, infrastructure, container and cloud deployment pipelines. The candidate must be able to modify CI/CD pipelines, integrate security tools, create gates and secure containers, Infrastructure as Code and secrets.
Key Responsibilities
- Integrate SAST, DAST, SCA and secrets scanning into CI/CD pipelines.
- Configure security quality gates based on severity, policy and approved exceptions.
- Automate controls using pipeline YAML, Groovy, scripts, APIs, plug-ins and reusable templates.
- Secure Jenkins, GitHub Actions, GitLab CI/CD or Azure DevOps pipelines.
- Scan Docker images and implement Kubernetes security controls.
- Scan Terraform and other Infrastructure as Code for vulnerabilities and misconfigurations.
- Integrate HashiCorp Vault, Azure Key Vault or AWS Secrets Manager.
- Automate ticketing, metrics, false-positive handling and remediation workflows.
For architect roles, define enterprise pipeline patterns, tooling strategy and adoption roadmaps