Grow as the Subject Matter Expert (SME) for security best practices
Promote a culture of security, automation, and continuous improvement
Integrate and manage security controls and best practices
Manage DAST, IAST, and SAST tools to identify and remediate vulnerabilities
Automate security testing and compliance checks
Develop and enforce policy as code for Kubernetes environments
Implement and manage infrastructure as code (IaC) solutions
Collaborate with development, operations, and security teams to address vulnerabilities
Continuously evaluate and improve DevSecOps tools, processes, and standards

Requirements

Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field
5+ years of experience with DevSecOps practices
3+ years of hands-on experience deploying, managing, and securing Kubernetes clusters
Proven expertise with policy as code frameworks (e.g., OPA/Gatekeeper, Kyverno)
Demonstrated proficiency implementing DAST, IAST, and SAST tools
5+ years of experience with Docker image security scanning
Strong background with infrastructure as code (IaC) tools such as Terraform, Helm, or Ansible
Expert-level experience with Linux
Experience with cloud platforms (AWS, GCP, Azure)
Solid scripting and automation skills (e.g., Python, Bash, Go)
Experience creating executive-level security reports and KPIs
Excellent analytical, troubleshooting, and incident response abilities
Strong communication and collaboration skills
Experience with eBPF and Cilium Tetragon is a plus

Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

DevSecOpsKubernetespolicy as codeDASTIASTSASTinfrastructure as codeDockerLinuxscripting

Soft Skills

analytical skillstroubleshootingincident responsecommunicationcollaboration