DevSecOps Engineer[onsite]

DevSecOps Engineer

Location: Miami, Florida (On-Site)

Contract Duration: 6-month contract

Key Responsibilities

• Conduct static code reviews during the development pipeline to identify security vulnerabilities and ensure secure code practices.
• Perform penetration testing (PenTest) on applications in development and production environments (especially on SaaS platforms).
• Implement both SaaS-based security testing (SaaST) and dynamic application security testing (DAST) for major platforms.
• Focus primarily on security and testing for core business systems: Salesforce and Oracle (cloud platform experience in AWS is a plus).
• Collaborate closely with the security team to integrate security tools and processes.
• Monitor, alert and respond to security risks and findings in applications and infrastructure.
• Work hands-on rather than purely strategic this is a doer role.

The Ideal Candidate Will Have:

• Strong hands-on experience as a DevSecOps Engineer or Security Engineer in application development environments.
• Demonstrated experience doing static code analysis (SAST) and dynamic testing (DAST) and/or pen-testing applications.
• Experience with Salesforce and/or Oracle applications/platforms and security testing thereof.
• Familiarity with AWS (or other cloud platforms) is preferred.
• Experience integrating with CI/CD pipelines and embedding security tooling in the SDLC.
• Excellent collaboration with development, operations and security teams.
• Ability to deliver results quickly in a fast-paced environment.