Senior DevSecOps

Strategic Security Leadership

• Define and implement advanced security strategies for multi-cloud environments (AWS, Azure).

• Drive security automation and continuous compliance across CI/CD pipelines.

• Influence architecture and design decisions to align with Zero Trust and cloud-native security principles.
   

Vulnerability Management & Governance

• Lead vulnerability identification, prioritization, and remediation efforts across diverse projects and workloads.

• Collaborate with Development, Cybersecurity, and Tech Architecture teams to ensure sustainable fixes and long-term risk reduction.

• Establish governance frameworks for secure development and deployment practices.
   

Monitoring & Risk Management

• Own security posture monitoring using Datadog, Wiz, and native cloud tools.

• Track and improve organizational security scores, compliance benchmarks, and risk indicators.

• Collaborate with Cybersecurity to implement monitoring strategies for detection of anomalies and policy violations

• Provide executive-level reporting and actionable insights for leadership.
   

DevSecOps Enablement

• Champion secure IaC practices (Terraform) with DevOps and SRE teams.

• Integrate automated security checks into build pipelines and enforce policy-as-code.

• Mentor teams on secure coding, container security, and cloud security best practices.
   

Cross-Functional Collaboration

• Act as a trusted advisor to development, operations, and security stakeholders.

• Drive cultural adoption of security-first principles across engineering teams.

• Contribute to incident response planning and post-mortem analysis for security events.
   

10+ years in IT with 5+ years in cloud security and DevSecOps roles.

Deep expertise in AWS and Azure security services and architectures.

Advanced proficiency in IaC tools (Terraform, CloudFormation, ARM templates).

Hands-on experience with Datadog, Wiz, and vulnerability management platforms.

Strong knowledge of CI/CD security integration, container security (Docker, Kubernetes), and policy-as-code.

Familiarity with compliance frameworks (SOC2) and risk management methodologies.

Exceptional communication and leadership skills for influencing technical and business stakeholders.
 

Certifications: AWS Certified Security Specialty, Azure Security Engineer, GIAC Cloud Security Automation, Kubernetes Security Specialist, or equivalent.

Experience in security automation, scripting (Python, Bash), and cloud-native security tooling.

Proven track record of leading security initiatives in large-scale, multi-cloud environments.