DevSecOps Engineer

• Knowledge of cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes, OpenShift).

• Implement security tools and best practices within CI/CD pipelines to automate security testing, vulnerability assessments, and ethical hacking.

• Design, deploy, and manage secure infrastructure using Infrastructure as Code (IaC) principles and tools like Terraform, CloudFormation, or Ansible.

• Lead and perform ethical hacking, penetration testing, and security audits to identify vulnerabilities, assess risks, and recommend mitigation strategies.

• Conduct penetration testing on applications, networks, and cloud environments using tools like Burp Suite, Metasploit, Nmap, and Kali Linux.

• Develop, maintain, and enhance security-focused regression testing frameworks to proactively identify and address security vulnerabilities.

• Monitor and respond to security threats, perform regular security assessments, and implement remediation strategies using SIEM tools like Splunk, ELK, or AWS Security Hub.

• Participate in incident response and post-incident analysis, contributing to continuous improvement and learning.

• Collaborate with cross-functional teams to define and implement best practices for secure DevOps processes.

• Ensure adherence to security compliance frameworks (e.g., NIST, CIS, ISO 27001, SOC 2) and assist in security audits.

• Implement security hardening techniques for applications, networks, and infrastructure.

• Develop and enforce security policies for secrets management, identity & access management (IAM), and role-based access control (RBAC).

• Automate security scanning, configuration management, and patch management processes.

• Conduct threat modeling and risk assessment to improve security posture.

• Work with developers to integrate security best practices into the software development lifecycle (SDLC).

• Stay updated with the latest security threats, vulnerabilities, and industry trends.

Required Qualification:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.

PureLogics is a full services technology company with having presence in the USA, UAE, and in Lahore. Over the past 18+ years, we have matured from a narrowly-focused five-person team to a well-established technology hub with around employees. We’re CMMI Level 2 and ISO Certified company and highly acclaimed AWS consulting partners.

The success of our business mainly lies in building a team of A-players, who work together and build together, and who crave perfection in everything they produce for our elite clients. We offer the opportunity to individuals that are eager to take on tough challenges under our mentorship toward a bright future.

• Annual Paid Leaves

• Leave Encashment

• Paid Certifications

• Health, Life Insurance

• Provident Fund

• Child Education Program

• Referral Bonus Program

• Car & Bike Finance Program

• Monthly Achievements

• Public Holiday & Weekend Compensation

• Develop, implement, and maintain security automation tools and processes to integrate security into continuous integration and continuous deployment (CI/CD) pipelines.
• Design and manage infrastructure as code (IaC) using modern configuration management and orchestration tools to ensure consistent and secure environments.
• Collaborate with cross-functional teams to embed security principles into application development and deployment.
• Monitor cloud environments and infrastructure for security vulnerabilities and respond proactively to potential threats.
• Establish and enforce security policies and best practices across development, testing, and production environments.
• Lead and mentor a team of five engineers, providing technical guidance and fostering professional growth to strengthen team capabilities.
• Conduct security assessments and audits to ensure compliance with industry standards and internal requirements.
• Develop and maintain documentation related to security architecture, tools, processes, and incident response plans.
• Stay updated with the latest security trends, vulnerabilities, and technologies to continuously improve security posture.
• Work closely with stakeholders to communicate security risks and recommend mitigation strategies.