Senior DevSecOps Engineer

About the job

What You Will Do Design, build, and maintain CI/CD pipelines using GitHub Actions, GitLab CI, or Jenkins that embed security scanning, automated testing, and compliance checks into every deployment. Implement shift-left security by integrating SAST, DAST, SCA, and container scanning tools such as Snyk, SonarQube, Checkmarx, or Trivy into development workflows. Write and maintain automated test suites — unit, integration, API, and end-to-end — using frameworks such as Playwright, Cypress, Selenium, or Pytest. Manage Infrastructure-as-Code testing and validation using Terraform, Terratest, or Checkov to ensure changes are secure and compliant before deployment. Build automated security compliance reporting and vulnerability-tracking dashboards for client security and engineering leadership. Conduct code review and security audits to enforce secure coding practices, dependency hygiene, and secrets management. Collaborate with international engineering and security teams to define quality gates, SLA metrics, and release-readiness criteria. What We’re Looking For 4+ years of DevSecOps, security engineering, or QA automation experience. Hands-on proficiency with CI/CD pipeline design using GitHub Actions, GitLab CI, or equivalent, including multi-stage workflows and reusable pipeline templates. Experience integrating security scanning tools (SAST/DAST/SCA) such as Snyk, SonarQube, or Trivy into automated pipelines. Strong programming skills in Python, JavaScript/TypeScript, or Go for test automation and tooling. Experience with Infrastructure as Code (Terraform, Pulumi, or CloudFormation) and infrastructure testing frameworks. Flawless English communication skills to present security findings and quality metrics to engineering leadership.