Match score not available

AWS DevSecOps Engineer

Remote:

Full Remote

Work from:

Philippines, United Kingdom

Offer summary

Qualifications:

Hands-on experience securing AWS environments, Knowledge of DevSecOps and security testing, Experience with Terraform and CloudFormation, Proficiency in scripting languages like Python.

Key responsabilities:

Integrate security controls within AWS
Design secure automated infrastructure
Work with teams to integrate security tools
Ensure compliance with regulations

Cloud Bridge Scaleup https://www.cloud-bridge.co.uk/

51 - 200 Employees

See all jobs

Job description

We are seeking an experienced AWS DevSecOps Engineer to join our engineering team. The ideal candidate will be responsible for integrating security into the DevOps pipeline, automating security processes, and ensuring compliance while leveraging AWS cloud technologies. This role requires a solid understanding of AWS services, CI/CD pipelines, and security best practices in a cloud-first environment.

Key Responsibilities:

Integrate security controls and monitoring within AWS, automating security at every stage of the DevOps lifecycle.
Design secure, automated infrastructure using Terraform, CloudFormation, and enforce AWS security best practices (IAM, access control, encryption).
Work with DevOps teams to integrate security testing tools (e.g., OWASP ZAP, Snyk) into CI/CD pipelines (Jenkins, GitLab).
Ensure compliance with regulations (GDPR, PCI-DSS, HIPAA) through logging, auditing, and monitoring.
Assist in security incidents, conduct root cause analysis, and implement preventative security measures.
Set up monitoring and alerts for security events, generating regular security posture reports.

Required Skills & Experience:

Hands-on experience securing AWS environments (EC2, S3, IAM, Lambda).
Knowledge of DevSecOps, secure coding, vulnerability management, and security testing.
Experience with Terraform, CloudFormation, and automating security processes.
Experience integrating security tools into CI/CD pipelines for continuous validation.
Familiarity with AWS security tools (GuardDuty, Inspector) and third-party vulnerability management tools.
Proficiency in scripting (Python, Bash, PowerShell) to automate security tasks.
Understanding of industry compliance (GDPR, PCI-DSS, HIPAA) and its implementation in AWS.
Strong analytical skills to identify and address vulnerabilities quickly.
Excellent communication skills to work effectively with cross-functional teams.

Preferred Qualifications:

AWS Certified Solutions Architect, DevOps Engineer, Security Specialty, or similar security certifications (CISSP, CISM).
Experience with Docker, Kubernetes, and EKS for securing cloud-native apps.
Familiarity with tools like Prisma Cloud or CloudHealth for cloud security posture management.
Experience in Agile environments, ensuring security requirements are met within sprints.

If you’re ready to advance your career in cloud technologies and enjoy a role that values your growth, this is the opportunity for you!