DevSecOps Engineer

Zaden Technologies, Inc., a cutting edge fintech software innovator, is seeking a DevSecOps Engineer within our Information Technology & Cybersecurity team. You will design, implement, and automate secure CI/CD pipelines, embedding security into every phase of the SDLC for cloud native financial applications. Responsibilities include infrastructure as code, vulnerability management, security monitoring, compliance (e.g., SOC 2, PCI), and incident response. You'll collaborate closely with developers and security engineers, champion DevSecOps best practices, and help scale secure, resilient platforms that power next generation financial services.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines for fintech applications.
• Embed security controls and checks across the full SDLC (code, build, test, deploy, operate).
• Develop and maintain infrastructure as code (e.g., Terraform, Cloud
• Formation) for cloud environments.
• Implement and manage containerization and orchestration (Docker, Kubernetes) with security best practices.
• Own vulnerability management: scanning, triage, remediation coordination, and reporting.
• Deploy and tune security monitoring, logging, and alerting for cloud and application workloads.
• Support compliance with industry standards such as SOC 2, PCI-DSS, and ISO 27001.
• Collaborate with software engineers and security teams to design secure architectures and patterns.
• Automate security testing (SAST/DAST/IAST/SCA) within the CI/CD toolchain.
• Participate in incident response, root cause analysis, and continuous improvement of security posture.

Required Skills

• CI/CD pipeline design (Git
• Lab CI, Git
• Hub Actions, Jenkins, or similar)
• Infrastructure as Code (Terraform, Cloud
• Formation, or similar)
• Cloud platforms (AWS, Azure, or GCP) with security best practices
• Containerization and orchestration (Docker, Kubernetes)
• Vulnerability scanning and management tools (e.g., Snyk, Nessus, Qualys)
• Security testing tools (SAST/DAST/SCA) and integration into pipelines
• Linux administration and shell scripting (Bash)
• Programming/scripting (Python, Go, or similar) for automation
• Security monitoring, SIEM, and log management (e.g., Cloud
• Watch, Splunk)
• Knowledge of security and compliance frameworks (SOC 2, PCI-DSS, ISO 27001)