Cyber Security Engineer (DevSecOps / Cloud Security)

Overview

We are seeking a highly technical Cyber Security Engineer with good hands-on experience in DevOps, SRE, cloud platforms, and modern software delivery environments.

This role is ideal for candidates who have worked directly within DevOps or SRE teams and are familiar with securing cloud-native infrastructure, Kubernetes platforms, CI/CD pipelines, and Infrastructure as Code (IaC) environments.

You will partner closely with Engineering, Platform, DevOps, and Security teams to integrate security into the software development lifecycle (SDLC), improve cloud security posture, automate remediation workflows, and support highly available production systems.

Key Qualifications

DevOps, SRE & Cloud Engineering

• Proven hands-on experience working in DevOps, SRE, Platform Engineering, Cloud Engineering, or DevSecOps environments.
• Experience supporting large-scale, highly available production systems.
• Good understanding of SDLC, software delivery workflows, and modern engineering practices.
• Hands-on experience with cloud platforms such as AWS, Azure, and/or GCP.
• Experience with Infrastructure as Code (IaC) tools such as Terraform, Pulumi, or similar technologies.
• Experience with CI/CD pipelines such as Jenkins, GitHub Actions, GitLab CI/CD, or equivalent platforms.
• Experience managing and securing Kubernetes environments (K8s, EKS, AKS, GKE) and containerized workloads.
• Familiarity with container orchestration, image lifecycle management, AMI rotation, golden images, and infrastructure standardization practices.
• Understanding of cloud networking, IAM, workload security, secrets management, and cloud-native architectures.
• Familiarity with observability and monitoring platforms such as Prometheus, Grafana, Datadog, CloudWatch, or New Relic.
• Good troubleshooting, incident investigation, and operational problem-solving skills.

Security, Vulnerability Management & DevSecOps

• Experience integrating security controls into DevOps and engineering workflows.
• Experience with vulnerability scanning solutions such as Tenable, Qualys, Prisma Cloud, Snyk, Trivy, or equivalent platforms.
• Good understanding of vulnerability management, prioritization, remediation, and risk reduction processes.
• Experience reviewing and remediating security findings across cloud infrastructure, containers, Kubernetes clusters, and applications.
• Familiarity with container image scanning, cloud security posture management (CSPM), and Software Bill of Materials (SBOM).
• Ability to analyze vulnerabilities and provide practical remediation recommendations.
• Experience coordinating remediation efforts across engineering, platform, and infrastructure teams.
• Familiarity with penetration testing methodologies, OWASP Top 10, and security best practices.

Programming & Automation

• Proficiency in one or more programming or scripting languages such as Python, Go, Bash, or similar technologies.
• Passion for automation and continuous improvement.
• Experience building tooling, automation, integrations, or workflows to improve operational efficiency and security processes.
• Experience using APIs and automation frameworks to streamline security and infrastructure operations.

AI & Security Automation (Nice to Have)

• Interest in AI-assisted security operations and engineering automation.
• Hands-on experience with LLM-based tools.
• Familiarity with MCP (Model Context Protocol) is advantageous.
• Experience developing AI-powered workflows for vulnerability management, security operations, data enrichment, or operational automation is a plus.

Responsibilities

• Collaborate with Engineering, DevOps, SRE, and Platform teams to secure cloud-native applications and infrastructure.
• Integrate security controls into CI/CD pipelines and software development workflows.
• Assess and improve security controls across cloud, container, and Kubernetes environments.
• Drive vulnerabilities through the complete remediation lifecycle and track risk reduction initiatives.
• Implement and maintain container and cloud security scanning solutions.
• Review Infrastructure as Code (Terraform, Pulumi, etc.) and recommend security improvements.
• Design and implement automation solutions for security operations, vulnerability management, and operational workflows.
• Support cloud security architecture reviews and platform security initiatives.
• Analyze security, infrastructure, and application telemetry to support risk-based decision making.
• Explore AI-driven approaches to enhance security operations, automation, and remediation efficiency.
• Stay current with emerging threats, vulnerabilities, cloud technologies, and industry best practices.

Education & Experience

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.
• Minimum 3 years of experience in DevOps, SRE, Platform Engineering, Cloud Engineering, DevSecOps, Cloud Security, or related technical fields.
• Demonstrated experience working in production cloud and DevOps environments.
• Experience with Kubernetes, containers, CI/CD, and Infrastructure as Code.
• Experience with vulnerability management, remediation programs, and security tooling.
• Exposure to AI-assisted security operations, MCP tooling, or security automation is advantageous.