DevSecOps Analyst

About the role

As a DevSecOps Engineer, you will be responsible for designing, automating, and maintaining security controls across cloud platforms and infrastructure using reusable internal tools and services (such as bots, CLI tools, and IaC modules). You will provide security-focused technical support to teams that develop and operate services, ensuring the protection of assets and compliance with security standards—without directly intervening in their SDLC.

Responsibilities

• Internal tool development: Build bots, scripts, and microservices (Python/Bash) to automate security hardening, secrets management, key rotation, and compliance checks
• Publish and maintain SDKs or CLI tools that simplify security-related tasks for other teams
• Validate Terraform and CloudFormation templates prior to deployment using policy-as-code frameworks and linters
• Define secure IaC modules (VPC, WAF, KMS, IAM) following least-privilege p...