Devsecops Lead

Job description

**Job Title: DevSecOps Lead** **Role Overview:** **We are seeking a skilled DevSecOps Engineer to support secure application delivery, infrastructure optimization, and messaging system reliability. The role involves enhancing DevSecOps practices, improving system stability, and ensuring effective monitoring and security validation.** **Key Responsibilities:** - **RabbitMQ Optimization & Troubleshooting:** - **Analyze and troubleshoot environment-specific RabbitMQ issues, particularly in staging environments.** - **Perform version upgrades and validate behavior across Dev, QA, and Stage environments.** - **Support stability and performance improvements for messaging systems.** - **DevSecOps Implementation:** - **Design, implement, and maintain CI/CD security pipelines using tools such as Trivy and Mend.** - **Integrate automated security scanning into development workflows aligned with best practices.** - **Collaborate with development and cybersecurity teams for vulnerability remediation and risk assessment.** - **Security Tools & Compliance:** - **Evaluate the effectiveness of open-source security tools and communicate limitations.** - **Recommend and support adoption of enterprise-grade security tools (e.g., Fortify on Demand, Aikido, Snyk) where higher assurance is required.** - **Generate and present security reports to stakeholders.** **Key Skills & Requirements:** - **Hands-on experience with DevSecOps practices and CI/CD pipelines** - **Strong knowledge of container security tools (Trivy, Mend, etc.)** - **Experience with RabbitMQ or similar messaging systems** - **Understanding of application security, vulnerability management, and remediation** - **Familiarity with open-source vs licensed security tools and their trade-offs** - **Strong collaboration skills with cross-functional teams (Dev, Infra, Security)**