DevSecOps Engineer

We are seeking a skilled DevSecOps Engineer with expertise in cloud platforms such as AWS, Azure, and GCP, along with containerization technologies including Docker, Kubernetes, and OpenShift. The ideal candidate will be responsible for implementing security tools and best practices within CI/CD pipelines to automate security testing, vulnerability assessments, and ethical hacking. This role involves designing, deploying, and managing secure infrastructure using Infrastructure as Code (IaC) tools like Terraform, CloudFormation, or Ansible.

Key Responsibilities:
- Implement and maintain security automation within CI/CD pipelines to ensure continuous security testing and vulnerability management.
- Lead ethical hacking, penetration testing, and security audits to identify vulnerabilities, assess risks, and recommend mitigation strategies.
- Conduct penetration testing across applications, networks, and cloud environments using tools such as Burp Suite, Metasploit, Nmap, and Kali Linux.
- Develop and enhance security-focused regression testing frameworks to proactively detect and address security issues.
- Monitor security threats, perform regular security assessments, and implement remediation strategies using SIEM tools like Splunk, ELK, or AWS Security Hub.
- Participate in incident response and post-incident analysis to support continuous security improvements.
- Collaborate with cross-functional teams to define and implement secure DevOps best practices.
- Ensure compliance with security frameworks such as NIST, CIS, ISO 27001, and SOC 2, and assist in security audits.
- Apply security hardening techniques to applications, networks, and infrastructure components.
- Develop and enforce policies for secrets management, identity and access management (IAM), and role-based access control (RBAC).
- Automate security scanning, configuration management, and patch management processes.
- Conduct threat modeling and risk assessments to enhance overall security posture.
- Work closely with developers to integrate security best practices throughout the software development lifecycle (SDLC).
- Stay current with emerging security threats, vulnerabilities, and industry trends.

Required Qualifications:
- Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
- Minimum of 2 years of experience in DevSecOps, Security Engineering, or a related discipline.
- Proven hands-on experience in penetration testing, ethical hacking, and security automation.

Preferred Qualifications and Benefits:
PureLogics is a well-established technology company with over 18 years of experience and a presence in the USA, UAE, and Lahore. We are a CMMI Level 2 and ISO-certified organization, recognized as AWS consulting partners. Our success is driven by a team of dedicated professionals who strive for excellence and innovation.

We offer a supportive environment for young and enthusiastic individuals eager to tackle challenging projects with mentorship and growth opportunities. Our benefits package includes:
- Annual paid leaves and leave encashment
- Paid professional certifications
- Health and life insurance coverage
- Provident fund contributions
- Child education program
- Referral bonus program
- Car and bike financing options
- Monthly achievement recognition
- Compensation for public holidays and weekends

Compensation: Rs. 200,000 to Rs. 250,000 per month
Work Location: On-site

This role is ideal for candidates passionate about integrating security into modern DevOps practices and eager to contribute to a dynamic and growing technology company.