DevSecOps Engineer

About the role

Oddity Tech is looking for a hands‑on DevSecOps Engineer to embed security throughout its software delivery lifecycle. You will work closely with engineering teams to build secure‑by‑default pipelines, automate security controls, and protect cloud workloads while enabling rapid, reliable releases.

Key responsibilities

• Design, implement and maintain secure CI/CD pipelines with integrated security tooling.
• Automate shift‑left security checks (SAST, DAST, SCA, secrets detection, container scanning).
• Secure AWS and GCP environments using IaC and policy‑as‑code, applying CIS Benchmarks.
• Develop and operate SIEM or centralized log aggregation platforms, including log pipelines and detection rules.
• Support incident response and continuously monitor cloud and application security posture.

Required profile

• 4+ years of experience in DevOps, security engineering, or SRE, with at least 2 years focused on DevSecOps or cloud security.
• Hands‑on experience securing AWS and/or GCP workloads (IAM, networking, encryption, logging).
• Proven ability to build CI/CD pipelines using tools such as GitHub Actions, GitLab CI, Jenkins or Argo.
• Familiarity with OWASP Top 10, NIST, CIS Controls and data‑protection regulations (GDPR, PCI DSS).

Required skills

• AWS
• GCP
• IAM
• KMS / encryption
• Terraform
• CloudFormation
• Pulumi
• GitHub Actions
• GitLab CI
• Jenkins
• Argo
• Snyk
• Trivy
• Semgrep
• Checkmarx
• Checkov
• tfsec
• Python
• Go
• Bash
• Docker
• Kubernetes
• Splunk
• ELK
• Datadog