DevSecOps Engineer

Integrate security into the software development lifecycle. **Responsibilities:** - Implement security automation in CI/CD pipelines (SAST, DAST, SCA) - Manage container security and vulnerability scanning - Conduct security code reviews and threat modeling - Implement secrets management and IAM policies - Respond to security incidents and drive remediation **Requirements:** - 3+ years in DevSecOps or application security - Experience with tools (SonarQube, Snyk, Trivy, Vault) - Strong scripting skills (Python, Bash) - Knowledge of OWASP Top 10 and SANS 25 - CEH/OSCP or equivalent certification preferred