Senior DevSecOps Engineer

About the Role:

We’re seeking an experienced Senior DevSecOps Engineer to help secure and optimize our cloud infrastructure and CI/CD environments. In this role, you’ll integrate security throughout the software development lifecycle, enabling fast, reliable, and compliant code delivery within a regulated medical technology environment.

Key Responsibilities:

• Design, implement, and secure cloud infrastructure using infrastructure-as-code (IaC) tools such as Terraform or CloudFormation.
• Embed security controls into CI/CD pipelines using tools like SonarQube, GitLab CI, and others.
• Automate security monitoring, vulnerability assessments, and audit logging across systems.
• Manage container security, identity and access management (IAM), secrets management, and encryption solutions.
• Partner with engineering teams to promote secure coding practices and proactive security reviews.
• Ensure infrastructure and processes remain compliant with frameworks such as ISO 27001, HIPAA, GDPR, and other relevant standards.
• Lead incident response efforts, conduct root cause analysis, and document outcomes.
• Facilitate internal security training sessions and contribute to the improvement of technical documentation.

Qualifications:

• Minimum 5 years of experience in DevOps or DevSecOps roles with a strong focus on cloud security.
• In-depth knowledge of AWS or Azure security services and architectures.
• Experience with CI/CD pipelines and scripting languages such as Python, Bash, or PowerShell.
• Familiarity with security frameworks, compliance standards, and secure coding practices.
• Hands-on experience managing container security (e.g., Docker, Kubernetes).
• Proficient with tools like AWS CloudTrail, GuardDuty, Secrets Manager, Vault, or similar.
• Strong analytical, troubleshooting, and incident response skills.
• Relevant security certifications (e.g., AWS Security, CISSP, OSCP) are a plus.
• Excellent English communication skills, both written and spoken.
• Comfortable working with distributed teams and overlapping schedules with colleagues in Pakistan and the United States.