5+ years of professional experience in technology or information security.
2+ years of hands-on DevSecOps engineering or implementing security automation within software delivery and cloud environments
Write, testin, debug, and maintain code or scripts in PowerShell, Python, C#, Java, or comparable languages.
CI/CD pipeline development, security control integration, and CI/CD platform security.
Azure or AWS cloud infrastructure and containerized workloads.
CNAPP products and cloud security posture management (CSPM), including operation or evaluation of multiple products.
Source-to-cloud findings correlation, vulnerability assessment, and remediation.
Infrastructure as code (IaC) and policy-as-code management of cloud security policies and CNAPP configuration, with CI/CD integration.
1 or more years of experience in related technologies and practices, including:
GitHub Advanced Security, GitHub Actions, Terraform, or comparable tools.
Application development and secure coding in C#, Java, Python, or comparable languages.
Kubernetes security, cloud workload protection, and cloud infrastructure entitlement management.
Policy frameworks such as Open Policy Agent (OPA)/Rego or native CNAPP policy languages.
Apply NIST, CIS, ISO, or comparable frameworks to technical security controls.
Bachelor's Degree in Computer Science or Technology or equivalent experience.