Site Reliability Engineer

• Embed Security into CI/CD Pipelines (“Shift Left”) by integrating security checks (SAST, DAST, SCA, Container Image Scanning) within CI/CD workflows across AWS and GCP environments
• Build reusable automation templates (e.g., Terraform modules, GitHub Actions, Jenkins pipelines) that ensure security and compliance by design
• Enable engineering teams to detect and fix issues early in the software lifecycle — reducing mean time to remediation (MTTR)
• Implement and manage policy-as-code using tools like Cloud Custodian (Cost), AWS Config, and GCP Organization Policies
• Enforce organizational standards for tagging, encryption, IAM, and resource lifecycle across AWS and GCP
• Continuously monitor and auto-remediate deviations to maintain posture compliance with internal controls and external frameworks like ISO and CI
• Build automation around CSPM tools and open-source scanners (e.g., Trivy, Syft/Grype, ZAP) for continuous visibility into vulnerabilities and misconfigurations
• Correlate findings with risk and compliance dashboards (e.g., DefectDojo, GitHub Security Dashboard, PowerBI) to drive actionable insights
• Collaborate with FinOps team to embed cost governance within DevSecOps automation
• Act as the technical bridge between developers, SREs, and security teams and develop playbooks for vulnerability triage, misconfiguration remediation, and incident readiness across AWS and GCP
• Conduct periodic workshops and code reviews to uplift security awareness and automation maturity within engineering teams

DevSecOps

Quality and Reliability Engineer II