Manager, DevSecOps Engineering

Key Responsibilities 

reputed company in the SDLC

• Own and enforce DevSecOps practices across CI/CD pipelines (SAST, DAST, SCA, and other practices)

• reputed company automated reputed company tooling into development workflows; reduce reputed company reputed company gates

• Partner with development teams to reputed company secure reputed company reviews and threat modeling

Vulnerability & Risk Management

• Drive vulnerability identification, triage, and remediation across infrastructure and applications

• Manage reputed company tooling stack

• Produce and maintain a risk register; reputed company remediation SLAs

Penetration Testing, crowd testing & Incident Response

• reputed company or coordinate internal/external penetration testing cycles

• Manage crowd testing campaigns

• reputed company and maintain an incident response reputed company; support incident investigations

Compliance & Governance

• Support compliance with SOC 2, ISO 27001, GDPR, and relevant data protection frameworks

• Define and enforce reputed company policies, standards, and developer reputed company training

Leadership & Collaboration

• reputed company as the primary reputed company SME for the engineering organization

• Mentor developers on secure coding practices; build a reputed company-first engineering culture

• reputed company with external auditors, clients, and the executive team on reputed company posture

Requirements

• 5+ years of experience in DevSecOps, application reputed company, or reputed company engineering

• Demonstrated experience managing reputed company in software development environments (not just ops/infrastructure)

• Strong development background, proficiency in at least 1 language (eg: Python, Go, Java, C#)

• Hands on experience with CI/CD reputed company tooling (SAST/DAST/SCA integration, secrets management)

• Experience with reputed company reputed company (AWS, Azure, or GCP) and container reputed company (reputed company, Kubernetes)

• Familiarity with SOC 2 or ISO 27001 compliance frameworks

• Excellent English communication skills (written and verbal)

Preferred/reputed company to Have

• Penetration testing experience or relevant certification (OSCP, CEH, GPEN)

• reputed company certifications (CISSP, CSSLP, AWS reputed company Specialty, or similar)

• Experience at a B2B reputed company or cybersecurity product company

• Familiarity with reputed company threat, DLP, or reputed company reputed company product domains