Overview
As a Security Engineer specializing in AWS and DevSecOps, you will contribute to a major transformation initiative by implementing and maintaining security controls across various technology workstreams. Collaborating closely with senior security specialists, your focus will be on enhancing cloud platform security, refining DevSecOps processes, and managing vulnerabilities to ensure robust security practices are integrated into every phase of delivery.
Responsibilities
- Implement and optimize CI/CD security tooling.
- Manage vulnerabilities and support remediation activities.
- Review infrastructure, code, and configuration changes for security risks.
- Support threat modeling and security assurance activities.
- Maintain secrets management, certificates, and access controls.
- Develop reusable security controls and best practices.
- Produce security documentation and evidence as required.
Requirements
- Security Engineering, DevSecOps, or Platform Engineering background.
- Experience with AWS, IAM, Kubernetes, and container security.
- Proficiency in Terraform and Infrastructure-as-Code.
- Familiarity with CI/CD security tooling (SAST, SCA, container and IaC scanning).
- Skills in Python and/or Bash scripting.
- Knowledge of Vulnerability Management, CVSS, and risk assessment.
- Previous experience within a regulated environment.