Requirements

• Bachelor’s degree
  
• Master’s in information science is preferred
  
• Certification:Security Certifications (Minimum of 1)
  
• • Certified Information Systems Security Professional (CISSP)
    
  • Certified Information Security Manager (CISM)
    
  • Certified Ethical Hacker (CEH)
    
  • Cloud & DevSecOps related professional Certifications
    
  • AWS Certified Security – Specialty
    

Experience:

• Minimum of 5+ years specifically in DevSecOps
  
• Experience in large-scale, high-availability environments (telecom, fintech, or enterprise IT)
  
• Proven track record of implementing secure CI/CD pipelines and automation
  
• Proficiency in:
  
• • Secure software development lifecycle
    
  • Cloud security architecture (AWS, Azure, GCP)
    
  • Containerization and orchestration security (Docker, Kubernetes)
    

The role operates within a highly complex internal technology and delivery ecosystem, requiring deep technical expertise and strong coordination across multiple domains:

• Application & Platform Complexity
  
• • Securing diverse enterprise applications, digital platforms, with varying architectures (monolithic, microservices, APIs)
    
  • Managing security across legacy systems and modern cloud-native applications
    
  • Ensuring consistent security standards across multiple development teams and product lines
    
• CI/CD & DevOps Integration
  
• • Embedding security into end-to-end CI/CD pipelines without disrupting delivery timelines
    
  • Managing integration of multiple security tools (SAST, DAST, SCA, secrets scanning) within automated workflows
    
  • Handling pipeline failures, false positives, and tuning tools for optimal performance
    
• Cloud & Infrastructure Complexity
  
• • Securing multi-cloud and hybrid environments with differing configurations and controls
    
  • Implementing secure Infrastructure as Code (IaC) while maintaining scalability and consistency
    
  • Managing containerized environments (e.g., Kubernetes) with evolving security requirements
    
• Data Protection & Access Control
  
• • Enforcing data security, encryption, and access governance across internal systems
    
  • Managing identity and access controls (IAM) for developers, systems, and applications
    
  • Ensuring proper handling of sensitive customer and business data across environments