Security Engineer

Role Summary

Operationalize DevSecOps security controls across SDLC and CI/CD using Azure DevOps Server, ensuring enforceable security gates, vulnerability lifecycle management, and audit-ready evidence.

Key Responsibilities

·        Configure and tune Fortify SAST/DAST, define thresholds and exception workflow.

·        Automate the renewal and deployment of SSL/TLS certificates using tools like HashiCorp Vault and Cert-Manager in Kubernetes to prevent downtime and security risks.

·        Integrate SBOM generation tools into the CI/CD pipeline to track component dependencies, license compliance, and vulnerabilities, providing visibility into the software supply chain.

·        Implement image signing and verification using tools like Sigstore/Cosign to ensure code integrit...