وظيفة مهندس DevSecOps أول لدى SIGMA في الرياض

Senior Resident DevSecOps Engineer

Job Summary

The Senior Resident DevSecOps Engineer serves as the technical lead and subject matter expert for Application Security and DevSecOps initiatives. The role is responsible for designing, implementing, governing, and continuously improving security controls throughout the Software Development Lifecycle (SDLC), ensuring secure CI/CD operations, vulnerability management, secure coding practices, and application security governance.

Key Responsibilities
DevSecOps Leadership
Lead the organization's DevSecOps maturity improvement initiatives.
Act as the primary technical authority for DevSecOps and application security activities.
Provide technical guidance, mentoring, and oversight to junior engineers and development teams.
CI/CD Security Integration
Design, review, and manage security integrations across CI/CD platforms such as GitLab, Azure DevOps, and CloudBees.
Implement and optimize:
Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
Dynamic Application Security Testing (DAST)
Interactive Application Security Testing (IAST)
Infrastructure as Code (IaC) Security Scanning
Secrets Management Solutions
Vulnerability Management
Define vulnerability management processes and workflows.
Lead vulnerability triage, risk assessment, prioritization, tracking, and remediation activities.
Establish remediation SLAs and monitor compliance.
Application Security
Conduct secure design reviews throughout the SDLC.
Support API security implementation and security architecture reviews.
Validate secure coding practices and development standards.
Governance & Compliance
Develop and maintain:
Security frameworks
Policies and procedures
Standards and guidelines
RACI matrices
Security KPIs and KGIs
Ensure alignment with industry security best practices.
Documentation & Knowledge Transfer
Create technical documentation, standards, runbooks, templates, and security checklists.
Conduct workshops, training sessions, and knowledge transfer activities.

Required Qualifications
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
3+ years of experience in Application Security, DevSecOps, or Secure Software Engineering.
Strong experience with CI/CD security integration and automation.
Hands-on experience with GitLab, Azure DevOps, CloudBees, Jenkins, or similar platforms.
Strong understanding of OWASP Top 10, Secure SDLC, and DevSecOps methodologies.
Experience with cloud environments (AWS, Azure, or GCP).
Experience with API security and container security.
Preferred Certifications

At least one of the following:

GIAC Cloud Security Automation (GCSA)
GIAC Defensible Security Architecture (GDSA)
DevSecOps Foundation / Professional
CSSLP
Certified Kubernetes Security Specialist (CKS)
Microsoft AZ-400
AWS Certified DevOps Engineer - Professional