DevSecOps Engineer

About the Job

We are seeking an experienced DevSecOps Engineer to secure our applications, AWS infrastructure, and Content Delivery Networks (CDNs) by embedding security into every phase of the development lifecycle. You will collaborate with DevOps, development, and security teams to design, automate, and implement vulnerability management strategies, with a focus on CI/CD pipelines, Infrastructure as Code (IaC), and CDN optimization.

• Vulnerability identification & management: Conduct automated scans and assessments of AWS infrastructure, applications, and CDN configurations for vulnerabilities using DevSecOps-integrated tools.
• Evaluate and deploy security tools within CI/CD pipelines for continuous vulnerability detection, tracking, and reporting.
• Prioritize vulnerabilities based on risk impact, leveraging threat intelligence, and drive remediation efforts across cross-functional teams.
• AWS & CDN security: Implement and enforce security best practices across AWS services (e.g., EC2, S3, IAM, Lambda, VPC) and CDN platforms (e.g., Cloudflare, Akamai, AWS CloudFront).
• Monitor AWS environments and CDN edge nodes for misconfigurations, threats, and performance-related security risks.
• Leverage AWS Security Hub, Inspector, GuardDuty, and CDN-specific security features (e.g., WAF, DDoS protection) to maintain a robust security posture.
• Application security & DevSecOps: Perform security reviews of application architecture, microservices, APIs, and CDN-integrated delivery systems.
• Embed security into the SDLC by integrating SAST/DAST tools (e.g., Snyk, SonarQube) into CI/CD workflows.
• Collaborate with development teams to shift security left, automating vulnerability detection and remediation in code and deployment pipelines.
• Incident response & remediation: Respond to security incidents across AWS, applications, and CDN infrastructure, coordinating with internal and external teams.
• Conduct root cause analysis for incidents, including CDN-related vulnerabilities, and recommend automated preventative measures.
• Develop and maintain playbooks for vulnerability management and incident response, optimized for DevSecOps workflows.
• Collaboration & automation: Partner with DevOps, Security, and Development teams to integrate security into CI/CD pipelines, IaC (e.g., Terraform, CloudFormation), and CDN deployments.
• Drive adoption of DevSecOps practices, including container security (Docker, Kubernetes) and automated threat modeling.
• Provide training and mentorship on secure coding, AWS security, and CDN optimization to stakeholders.

What you’ll need

Required qualifications

• Bachelor's Degree in Information Security, Computer Science, or a related field, or equivalent experience.
• 8+ years of experience in vulnerability management, AWS security, application security, or DevSecOps roles.
• Strong expertise in AWS services (IAM, S3, EC2, Lambda, VPC) and CDN platforms (e.g., CloudFront, Cloudflare, Akamai).
• Proficiency with vulnerability scanning tools (Wiz, Qualys) and DevSecOps-integrated security tools.
• Hands-on experience with SAST/DAST tools (Snyk, SonarQube) and their integration into CI/CD pipelines.
• Deep understanding of OWASP Top 10, CWE, and CDN-specific security risks (e.g., cache poisoning, DDoS).
• Proven experience with automation, CI/CD pipelines (Jenkins, GitLab CI), and IaC (Terraform, CloudFormation).
• Familiarity with container security (Docker, Kubernetes) and securing CDN-integrated architectures.
• Knowledge of threat modeling, risk assessments, and penetration testing in a DevSecOps context.
• Strong analytical and problem-solving skills with a focus on automation.
• Excellent communication and collaboration skills to bridge DevOps, Security, and Development teams.
• Ability to thrive in a fast-paced, remote, and DevSecOps-driven environment.
• AWS Certifications (e.g., AWS Certified Security - Specialty, AWS Certified DevOps Engineer).
• Experience with DevSecOps frameworks and tools (e.g., HashiCorp Vault, Checkmarx).
• Hands-on experience securing APIs, microservices, and CDN edge configurations.
• Familiarity with CDN security features like Web Application Firewalls (WAF), rate limiting, and bot management.
• Certification in DevSecOps or related fields (e.g., Certified DevSecOps Professional).

Why Aspire

• Be part of a remote-friendly, fast-paced, DevSecOps-driven environment.
• Work across DevOps, Security, and Development teams to embed security into the SDLC.
• Gain exposure to AWS, CDN, CI/CD, IaC, and container security at scale.