Senior DevSecOps Engineer for DevSecOps Pipeline

CoreData Systems

Contract · Flexible hours

About the role

CoreData Systems seeks a Senior DevSecOps Engineer to embed security into our CI/CD pipelines for a critical microservices platform. The project focuses on automating compliance checks, hardening container images, and integrating threat modeling into the development lifecycle.

Key responsibilities

• Design and implement secure CI/CD workflows using Jenkins, GitLab CI, or GitHub Actions.
• Automate container security scanning and vulnerability remediation with tools like Trivy and Clair.
• Develop infrastructure-as-code templates (Terraform, CloudFormation) with built‑in security controls.
• Collaborate with developers to embed security testing (SAST, DAST) early in the code pipeline.
• Monitor production environments for security incidents and enforce runtime policies.
• Document security standards and provide knowledge transfer to the internal team.

Must-have skills

• 5+ years in DevOps and security engineering.
• Deep experience with Docker, Kubernetes, and container hardening.
• Proficiency in CI/CD tools and pipeline automation.
• Strong knowledge of AWS security services and IAM best practices.
• Hands‑on experience with automated vulnerability scanning and remediation.

Nice to have

• Familiarity with Terraform Sentinel policies.
• Experience in threat modeling and secure code review.