Sr. Devsecops Security Engineer

We are looking for a highly experienced Senior DevSecOps Security Engineer to lead cybersecurity testing initiatives across web applications, APIs, CI/CD pipelines, and software supply chain environments.

The ideal candidate will have strong hands-on experience integrating security into the SDLC and driving secure-by-design practices across development, QA, and production environments.

• Lead and execute DevSecOps operations and cybersecurity testing for web applications and APIs.
• Perform and review Static Application Security Testing (SAST), including detailed source code review.
• Conduct Dynamic Application Security Testing (DAST) across development and pre-production environments.
• Design and execute fuzzing activities for applications and APIs.
• Perform Software Composition Analysis (SCA) to identify vulnerable open-source dependencies and third-party components.
• Assess and test CI/CD pipelines for security gaps, misconfigurations, and privilege escalation opportunities.
• Conduct software supply chain security testing and identify risks in build, artifact, and deployment processes.
• Drive security testing before the Quality Assurance (QA) phase to enable shift-left security practices.
• Define and implement security testing practices across the SDLC.
• Work closely with development, QA, DevOps, and architecture teams to embed cybersecurity testing into sprint cycles.
• Identify security test scenarios during sprint planning.
• Create, maintain, and automate security test cases.
• Execute and validate security test cases across Dev, UAT, and Production promotion stages.
• Review and validate remediation activities and provide risk-based recommendations.
• Mentor junior engineers, review their reports and contribute to security best practices, standards, and governance.