Senior DevSecOps Engineer

Requirements

• Lead initiatives to improve and enhance DevSecOps maturity across the organization.
• Conduct DevSecOps and Application Security maturity assessments against recognized frameworks and standards, including BSIMM 15, OWASP DSOMM, and OWASP DSOVS .
• Assess control coverage, pipeline maturity, security practices, control duplication, and high-risk areas, and identify gaps and improvement opportunities.
• Design, review, and coordinate the integration of security controls into CI/CD pipelines, including:
• SAST
• SCA
• DAST
• IAST
• Secrets Management
• Infrastructure as Code (IaC) Scanning
• Establish and govern vulnerability triage, prioritization, tracking, and remediation processes, including defined SLAs.
• Lead the implementation, configuration, and optimization of application, API, and secure development security tools.
• Develop and maintain technical standards, documentation, security guidelines, templates, checklists, and operational runbooks.
• Lead knowledge transfer activities and provide technical guidance to client teams.
• Provide technical mentorship and guidance to DevSecOps, cybersecurity, and software development teams.
• Monitor and report on Application Security KPIs, metrics, and DevSecOps maturity indicators.
• Support the alignment of security policies and standards with global best practices and applicable local regulatory requirements.
• Promote secure software development practices throughout the Software Development Life Cycle (SDLC).