DevSecOps Engineer

📋 Job Overview

We are looking for a DevSecOps Engineer with 6-8 years of experience. As a DevSecOps Engineer, you will be responsible for identifying, mitigating, and preventing security vulnerabilities in an organization's Application Programming Interfaces (APIs) throughout the entire software development lifecycle (SDLC).

🏢 About [Company]

two95 international inc is a company focused on innovation and excellence in technology.

🎯 The Role

As a DevSecOps Engineer, you will work closely with development and engineering teams to ensure the security of APIs and web applications throughout the SDLC.

✅ Key Responsibilities

• Conduct design reviews and threat modelling exercises for new APIs and features to proactively identify potential attack vectors and weak points before development begins.
• Perform ongoing governance and follow-through with API owners to ensure implementation of threat-based requirements.
• Support and consult with development and engineering teams in the areas of application security.
• Develop, deliver and keep up-to-date API security standard requirements and design patterns.
• Validate implementation of API security controls against outputs of vulnerability testing tools to enable auditability and verifiability.
• Serve as an API security technical advisor to application teams.
• Perform security risk assessments for all proposed application-related (APIs) changes.
• Examine source code for security flaws, insecure patterns, and hardcoded credentials, providing actionable feedback and remediation guidance to development teams.
• Assist in the investigation and analysis of security incidents related to applications and APIs, helping to identify the root cause and implement remediation plans.
• Develop and deliver secure coding guidelines and training programs for developers to foster a security-aware culture within the organization.
• Enhance security monitoring and analyse API traffic logs for anomalies to detect and respond to real-time threats and business logic abuse.

📌 Required Qualifications

• Proficiency in programming languages such as Python, Java, JavaScript, or Go, to understand and review code effectively.
• Direct hands-on experience developing and securing web APIs and web applications: REST, SOAP, gRPC.
• Direct hands-on experience with security testing of web services and web APIs.
• Experience with API Management solutions.
• Experience working with AWS or other cloud environments (development/architecture).
• Experience with cloud and API security standards (OWASP API Top 10, CIS Top 20).

⭐ Desirable Experience

• Knowledge of application threat modelling, Remediation of OWASP API Top 10, CIS Top 10, SANS Top 25.

🎁 Benefits

Competitive salary and benefits package.

🛂 Visa & Eligibility

No visa sponsorship or specific eligibility requirements mentioned.