Lead efforts to identify, prioritize, and remediate security-related issues across infrastructure (cloud and on-prem) and the software development lifecycle.Team leadership and management of DevOps and Security Engineers.Manage all assigned DevOps projects or continuous improvement activities within change initiatives, projects, or programme to fully meet the defined functional and non-functional requirements within budget and timescale.Work with developers to communicate and track critical security vulnerabilities within application code.Integrate security tooling into CI/CD pipelines, reporting, and automated processes.Ownership and acceptance of robust and repeatable processes for the transition of systems and projects into production ensuring that ongoing support, security, and capacity considerations are met.

Consult on DevSecOps requirements with a range of application and operations teams.Build and implement security solutions across the product lifecycle, including secure SDLC and product development. Perform periodic and on demand system audits and vulnerability assessments of system, internal applications and cloud services to identify security vulnerabilities.Perform internal penetration test on web, mobile applications.Implement Application Performance Management System.Harden Zakipoint Health environment against current and evolving threats.SIEM/Log Management.Automate the SDLC Process using CI/CD Pipeline.Containerize the microservices, web application etc.Automate Infrastructure creation and configuration with Terraform and Ansible.Tools and Technologies:Docker, AWS, Jenkins, Sonarqube, git, github, Burpsuite, owasp-zap, Linux, ELK stack, Python, golang, wazuh, Terraform, Ansible, kubernets, etc.

Implement security as code principles to ensure security measures are integrated into the CI/CD pipeline.Drive automation initiatives across the infrastructure stack to improve efficiency and reliability.Continuously evaluate and integrate new automation tools and technologies to enhance operational capabilities.Conduct threat modeling and risk assessments, ensuring that potential vulnerabilities are identified and addressed collaboratively.Evaluate, select, and implement security tools and technologies to enhance the overall security posture of the organization.Stay current with industry trends and emerging technologies to proactively address security challenges.

Performs penetration tests and vulnerability analysis on Android applications and Network infrastructure.Gather and analyze Open Source Intelligence (OSINT) to find information disclosures. Develop scripts, tools, and methodologies to enhance testing processes.Help customers to perform analysis and mitigation of security vulnerabilities.Communicate findings and remediation strategies effectively to clients, including technical staff and executive leadership.