DevSecOps Engineer

The incumbent will be responsible for developing, implementing, and maintaining security controls to safeguard applications across the organization.

This role requires deep expertise in application security, a strong understanding of DevSecOps tools and pipelines, and the ability to collaborate across multiple regions including Asia, Africa, and the UK.

• Minimum 6-8 years of hands-on experience in application security, preferably in large or regulated organizations.
• Regional or global experience is advantageous.
• Background in financial services or technology industry is a plus.
• Experience with at least one major cloud provider (AWS, Azure, GCP).
• Relevant certifications: CISSP, Security+, CISA, or equivalent

Core Competencies & Technical Skills:

• Strong knowledge of OWASP Top 10 and associated standards.
• Deep understanding of application-specific vulnerabilities (e.g., XSS, CSRF, SQL Injection).
• Hands-on experience with vulnerability analysis, triaging, and remediation.
• Proficient in DevSecOps, CI/CD pipelines, containerization, and cloud security.
• Strong scripting ability in Python, Perl, Bash, etc.