Technology: Java OR Python (Java is preferred)
DevSecOps Lead
This role combines technical leadership, security expertise, and DevOps best practices to embed security within the software development lifecycle while fostering innovation and delivery excellence. It requires a strategic thinker, problem-solver, and trusted advisor who excels at identifying opportunities, building relationships, and driving innovation in security and automation.
Key Responsibilities:
- Proactively assess security gaps, develop innovative solutions, and drive DevSecOps transformation to enhance resilience and efficiency.
- Stay ahead of security trends, cloud technologies, and compliance requirements, fostering a culture of continuous improvement.
- Implement security automation, risk mitigation strategies, and CI/CD security integration, ensuring secure software delivery.
- Establish trust with clients, stakeholders, and engineering teams, advocating for security best practices and DevSecOps adoption across the organization.
Key Qualifications:
- 10+ years in DevSecOps, Cloud Security, or Secure Software Development in Capital Markets or Financial Services.
- Expertise in CI/CD, cloud security (AWS, Azure, GCP), container security, and automation tools (Terraform, Ansible, Kubernetes).
- Strong knowledge of security frameworks (NIST, OWASP, CIS Benchmarks) and security testing (SAST, DAST, SCA).
- Proven ability to engage with clients, lead teams, and drive strategic security initiatives.