What are the responsibilities and job description for the Senior DevSecOps Engineer position at Soni?
We are seeking a Senior DevSecOps Engineer with strong AWS and cloud security expertise to lead the integration of security best practices across cloud infrastructure, CI/CD pipelines, and containerized application environments.
Responsibilities
- Design and implement secure DevSecOps practices across AWS infrastructure and CI/CD pipelines
- Integrate automated security scanning and validation into GitHub and GitLab workflows
- Secure containerized applications deployed in ECS Fargate environments
- Implement and manage SAST, DAST, SCA, and container vulnerability scanning solutions
- Develop and enforce secrets management and credential protection strategies
- Implement IAM governance and least-privilege access controls across cloud environments
- Secure Infrastructure-as-Code deployments using Terraform and/or CloudFormation
- Support vulnerability remediation, patching, and cloud security monitoring initiatives
- Configure monitoring, logging, alerting, and threat detection solutions
- Partner with engineering teams to improve security posture and operational resilience
- Support incident response, deployment validation, and security troubleshooting efforts
Required Qualifications
- 6 years of DevSecOps, Cloud Security, or Security Engineering experience
- Strong AWS experience including ECS Fargate, IAM, RDS, networking, and security monitoring
- Experience securing CI/CD pipelines using GitHub Actions and/or GitLab CI/CD
- Strong understanding of SAST, DAST, SCA, container scanning, and vulnerability management
- Experience securing Docker containers and Kubernetes/ECS-based workloads
- Strong knowledge of secrets management, credential rotation, and least-privilege access controls
- Experience securing Infrastructure-as-Code deployments using Terraform or CloudFormation
- Experience with security monitoring, logging, and threat detection tools
- Strong troubleshooting, incident response, and risk assessment skills
Preferred Qualifications
- Experience supporting .NET applications in AWS environments
- Familiarity with AWS Security Hub, GuardDuty, CloudTrail, Datadog, Wiz, Prisma Cloud, or Aqua Security
- Experience supporting compliance frameworks such as SOC 2, ISO 27001, HIPAA, or PCI
- Experience with automated security governance and policy enforcement tooling
- Security certifications such as AWS Security Specialty, CISSP, Security , or CKS