Associate Technical Lead, DevSecOps

Job Description/Preferred Qualifications

• Required Skills & Experience
• ▪ 4–5 years of experience in DevSecOps, Application Security, Security Engineering, or related roles, with at least 2+ years in a lead or senior technical role. ▪ Proven experience leading and mentoring security or DevOps engineering teams. ▪ Expert-level hands-on experience with Checkmarx One (SAST) or equivalent enterprise SAST platforms. ▪ Deep experience with DAST tools such as Burp Suite, OWASP ZAP, or commercial alternatives. ▪ Extensive experience architecting and integrating security tools into Jenkins, GitLab CI, Azure DevOps, or GitHub Actions at enterprise scale. ▪ Strong expertise in container security, Kubernetes security, and API security. ▪ Hands-on experience designing and implementing secrets management solutions (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault). ▪ Expert understanding of Secure SDLC, OWASP Top 10, SANS Top 25, and enterprise vulnerability management practices. ▪ Deep experience with cloud platforms (AWS, Azure, or GCP) and cloud-native security controls. ▪ Advanced Infrastructure as Code experience using Terraform, CloudFormation, Pulumi, or Ansible. ▪ Strong experience with Docker, Kubernetes, Helm, and service mesh technologies. ▪ Proficiency with observability and monitoring tools (Prometheus, Grafana, ELK, Splunk). ▪ Strong scripting and automation skills in Python, Bash, Go, or PowerShell. ▪ Experience driving security initiatives in Agile/Scrum and SAFe environments. ▪ Experience with threat modeling and secure architecture reviews.
• Preferred Qualifications
• ▪ Master’s degree with 4–5 years of relevant experience, or Bachelor’s degree with 6–8 years of experience. ▪ Security certifications such as CISSP, CCSP, OSCP, GWAPT, GWEB, or cloud security specialty certifications (AWS Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer). ▪ Cloud or DevOps certifications (CKS, CKA, AWS DevOps Professional, Azure DevOps Engineer Expert). ▪ Experience with container and API security platforms (Aqua, Prisma Cloud, Sysdig, Snyk). ▪ Experience with SIEM platforms (Splunk, Sentinel, Chronicle) and security orchestration (SOAR). ▪ Experience with zero trust architecture and identity-based security models. ▪ Background in penetration testing or red team activities. ▪ Experience presenting to and influencing executive leadership on security strategy and risk.
• Soft Skills