Senior DevSecOps Engineer

Senior DevSecOps Engineer – Drive Innovation in Secure Cloud-Native Development at JODAYN

Join JODAYN as a **Senior DevSecOps Engineer**, where you’ll play a pivotal role in bridging the gap between development, security, and operations to deliver scalable, secure, and high-performance cloud-native solutions. In this dynamic position, you’ll lead the integration of security best practices into the entire DevOps lifecycle, ensuring compliance, automation, and resilience while fostering a culture of continuous improvement.

As a key member of our engineering team, you’ll collaborate with cross-functional stakeholders—including developers, security experts, and infrastructure engineers—to design, implement, and optimize secure CI/CD pipelines, infrastructure-as-code (IaC) solutions, and monitoring frameworks. Your expertise will be instrumental in reducing vulnerabilities, automating security controls, and accelerating deployment cycles without compromising on reliability or compliance.

Key Responsibilities:

• Lead Secure DevOps Practices: Champion the adoption of security-by-design principles across development, testing, and production environments, ensuring alignment with industry standards like OWASP, NIST, and CIS benchmarks.
• Automate Security Workflows: Develop and maintain automated security testing tools, including static (SAST), dynamic (DAST), and infrastructure scanning, to identify and mitigate risks early in the development cycle.
• Cloud-Native Security Architecture: Design and implement secure cloud architectures (AWS/Azure/GCP) with a focus on zero-trust principles, least-privilege access, and container security (e.g., Kubernetes, Docker).
• CI/CD Pipeline Optimization: Architect and refine secure CI/CD pipelines, integrating security gates, compliance checks, and automated remediation workflows to streamline deployments.
• Incident Response & Forensics: Lead post-incident analysis, collaborate on threat modeling, and implement proactive security measures to enhance resilience against emerging threats.
• Collaborate with Teams: Partner with developers, security analysts, and DevOps engineers to embed security into agile workflows, conduct security code reviews, and mentor junior team members on secure coding practices.
• Compliance & Auditing: Ensure adherence to regulatory requirements (e.g., SOC 2, ISO 27001, GDPR) through automated compliance checks and documentation of security controls.
• Toolchain Innovation: Evaluate and deploy cutting-edge security tools (e.g., Prisma, Aqua, Checkmarx) to enhance visibility, detect vulnerabilities, and automate remediation processes.

Why This Role Matters:

At JODAYN, we’re redefining how organizations secure their digital transformation journeys. As a Senior DevSecOps Engineer, you’ll not only elevate our security posture but also empower teams to innovate confidently in a fast-paced, cloud-first environment. Your strategic mindset and hands-on expertise will drive us toward a future where security is seamlessly embedded into every phase of development—from ideation to deployment.

Qualifications & Skills:

We’re looking for a seasoned professional with:

• A strong background in **DevOps and cloud security**, with 5+ years of experience in designing and implementing secure infrastructure and CI/CD pipelines.
• Proficiency in **automation tools** (Terraform, Ansible, Jenkins, GitLab CI/CD) and **security tools** (Burp Suite, Nessus, OpenSCAP, or similar).
• Deep knowledge of **containerization** (Docker, Kubernetes) and **cloud platforms** (AWS, Azure, or GCP), including security configurations like IAM, VPC, and network policies.
• Experience with **security frameworks** (e.g., MITRE ATT&CK, CIS Controls) and **compliance standards** (ISO 27001, SOC 2, PCI-DSS).
• A **certification** in DevSecOps, cloud security (e.g., AWS Certified Security, CCSP), or penetration testing is a significant advantage.
• Strong **problem-solving skills**, with the ability to translate complex security requirements into actionable technical solutions.
• Excellent **communication and mentorship** skills to collaborate with diverse teams and foster a security-first culture.

If you’re passionate about merging security with agility and are eager to make an impact at the intersection of technology and risk management, we’d love to hear from you. Join us in shaping the future of secure, scalable, and high-performance cloud solutions.