Job Description

Integrate security practices into CI/CD pipelines and infrastructure-as-code (IaC)
Define and implement security controls in cloud environments (AWS, Azure, GCP)
Automate security scans (SAST, DAST, SCA, and container scanning) and enforce policy compliance
Conduct threat modeling, vulnerability management, and risk assessments
Collaborate with DevOps and development teams to remediate security issues
Establish and promote DevSecOps best practices, training, and documentation
Ensure compliance with security standards and regulations (e.g., ISO 27001, SOC 2, and GDPR)
Lead incident response and forensics processes when needed

About Sigma Software

Sigma Software