DevSecOps Engineer

**Description** **About the Role** The role focuses on preventing security vulnerabilities across production, staging, and development environments. The Engineer will integrate security into CI/CD, enforce access controls, manage patching, and support audit compliance. **Required Skill Set And Experience** 3\+ years in DevSecOps, DevOps, or Security Engineering Experience with .NET, SharePoint, SQL Server, and Python security SAST/SCA tools: SonarQube, Snyk, Bandit, Safety, OWASP Dependency\-Check CI/CD: DevOps, GitHub or GitLab Secrets management: AWS Key Vault or HashiCorp Vault Scripting: Python, PowerShell, or Bash Compliance frameworks: NIST, SOC2, or ISO 27001 **Preferred Qualifications** * Certifications: DevSecOps Professional, CISSP, CEH, Security\+, AWS Security Engineer * Experience with MS SQL Server TDE, RLS, and dynamic data masking * Experience with SharePoint PnP PowerShell automation **Key Responsibilities** * Integrate SAST/SCA/DAST tools into CI/CD pipelines * Build secure pipelines (DevOps, GitHub/ GitLab) * Ensure encrypted backups (AES\-256\) of SharePoint content databases * Automate permission audits and external sharing reviews * Implement TDE (Transparent Data Encryption) for production databases * Enforce row\-level security (RLS) and dynamic data masking * Automate vulnerability assessments and encrypted Database backups * Enforce MFA, RBAC, and quarterly access reviews for all accounts * Maintain environment separation (prod/staging/dev) with no production data in non\-prod * Manage vulnerability * Support CAB change management and enforce blackout windows * Ensure encrypted backups (AES\-256\) with quarterly restoration tests * Track EoSL dates for OS, apps, frameworks, and dependencies * Prepare audit evidence and monthly security reports