Job Category: Technical
Job Type: On-Site
Job Location: Lahore
The Senior DevSecOps and Cloud Security Engineer will secure CI/CD pipelines, cloud infrastructure, and deployments for Catalyic Security’s clients. You will identify risks across the software delivery lifecycle, automate security checks, and work closely with engineering teams to implement fixes that scale.
Key Responsibilities
- Design and secure CI/CD pipelines from code commit to production deployment
- Assess and harden cloud environments, including:
- AWS, Azure, and GCP configurations
- Identity and access management (IAM)
- Container and Kubernetes security
- Infrastructure as Code (Terraform, CloudFormation)
- Integrate automated security testing (SAST, DAST, SCA, secrets scanning) into build pipelines
- Identify misconfigurations, vulnerabilities, and risks across cloud workloads
- Implement and validate remediation in collaboration with development and operations teams
- Build and maintain security guardrails, policies, and monitoring
- Guide teams on secure deployment practices and DevSecOps adoption
Required Skills & Experience
- 5+ years of experience in DevSecOps, cloud security, or related roles
- Hands-on experience with at least one major cloud platform (AWS, Azure, or GCP)
- Strong knowledge of CI/CD tools such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps
- Experience with Docker, Kubernetes, and container security
- Scripting and automation skills (Python, Bash, or similar)
- Strong documentation and communication skills
- Ability to work independently and manage multiple projects
Education & Certifications (Preferred)
- Bachelor’s degree in Cyber Security, Computer Science, IT, or a related field
- Relevant certifications preferred, based on the environment:
- AWS Certified Security Specialty
- CARTP (Certified Azure Red Team Professional)
- CKS (Certified Kubernetes Security Specialist)
- CDP (Certified DevSecOps Professional)