DevSecOps Pentester

In this role, I will expect you to take on the following responsibilities: - Integrate security practices and tools into the DevOps pipeline to ensure that security is treated as a continuous process. - Perform Infrastructure-as-Code (IaC) automation and ServiceNow integrations to enhance automation of AWS service catalogues. - Contribute to the development of security tools, checklists, and automation efforts. - Identify potential security threats and vulnerabilities during the design phase, addressing flaws in CI/CD, IaC, and cloud/containerized environments. - Conduct both manual and automated security testing on web applications, APIs, and pipelines. - Actively participate in agile ceremonies, including sprint planning, threat modeling, and grooming sessions. - Create detailed reports that provide actionable advice on addressing identified vulnerabilities and improving security posture, including executive summaries and technical findings. - Validate remediation efforts and conduct retesting cycles to ensure issues are resolved effectively. - Track and manage issues using Jira workflows and developer tickets. - Advise on secrets management, Identity and Access Management (IAM), and secure deployment practices. - Educate development and operations teams on security best practices and emerging threats.