Job highlights

- Expertise in integrating security tools into CI/CD pipelines with skills in SAST, DAST, container security, Terraform, and Kubernetes
- Automate security scans, conduct threat modeling and security assessments, enforce security best practices, collaborate to remediate vulnerabilities, and manage secure infrastructure-as-code
- Integrate security tools and practices into CI/CD pipelines.
- Automate security scans (SAST, DAST, SCA, container security etc.).
- Conduct threat modelling and security assessments on infrastructure and applications.
- Develop and enforce security best practices across development and deployment environments.
- Collaborate with development and operations teams to remediate vulnerabilities.
- Manage and monitor infrastructure-as-code (IaC) with security in mind (e.g., Terraform, CloudFormation).




- Practical experience designing, developing, and maintaining CI/CD pipelines with GitHub Actions and/or Jenkins.
- Experience writing and optimizing automation for build, deployment, and ops tasks using shell scripting and Linux commands.
- Experience with containers and orchestration: Docker and Kubernetes.
- Experience in software development and infrastructure development is a plus.
- Experience with Git and Artifact management (e.g., Artifactory, Docker Trusted Registry).
- Support compliance initiatives (e.g., SOC2, ISO 27001, PCI-DSS).
- Stay up to date with the latest security threats, vulnerabilities, and technologies.

📌 DevSecOps (Navi Mumbai)
🏢 ERM Placement Services
📍 Navi Mumbai