Senior DevSecOps Engineer - Security Automation

Job description

We are seeking a Senior DevSecOps Engineer to design, build, and scale automated security solutions that protect complex retail environments across mobile and web platforms.

Responsibilities

- Develop and maintain automated security testing tools to identify and remediate vulnerabilities across mobile and web applications

- Lead experimentation and validation of new security automation approaches, including integration of tools like Dependabot and code scanning solutions

- Implement and refine proof-of-concept projects to evaluate innovative security technologies and methodologies

- Define, track, and report on security KPIs to ensure continuous improvement in security posture and team effectiveness

- Collaborate closely with development teams and client managers to align security initiatives with business objectives

- Participate in R&D activities focused on optimizing security processes, refactoring legacy systems, and enhancing automation coverage

- Manage multiple concurrent tasks autonomously while maintaining high attention to detail and quality standards

Requirements

- Proficiency in designing and developing automated security testing frameworks and tools for complex retail environments, with 5+ years of experience in security automation

- Background in conducting security research, proof-of-concept development, and experimentation with emerging security automation technologies

- Skills in managing and mitigating dependency vulnerabilities through automation tools and continuous integration pipelines

- Expertise in analyzing security metrics and defining KPIs to monitor and improve team security performance

- Familiarity with collaborating within agile, cross-functional teams ranging from small (3-5) to medium (6-10) sizes, including client-facing interactions

- English proficiency at B2 level or higher