DevSecOps & Cloud Security Consultant

About the role

The DevSecOps & Cloud Security Consultant will assess and enhance security across DevSecOps pipelines, cloud infrastructure, Kubernetes environments, and application delivery processes. This full‑time onsite position in Muscat requires 5–7+ years of experience in DevSecOps and cloud security.

Key responsibilities

• Assess and strengthen security across CI/CD pipelines and DevSecOps workflows.
• Review IaC templates, Helm charts, and source code for misconfigurations, hard‑coded secrets, and vulnerabilities.
• Perform cloud security assessments covering IAM, network controls, encryption, and logging.
• Implement or validate security automation and policy enforcement using OPA/Gatekeeper.
• Support vulnerability management, risk assessment, remediation tracking and revalidation.
• Evaluate security tools, conduct POCs and prepare technical reports.

Required profile

• 5–7+ years of hands‑on experience securing CI/CD pipelines, IaC, Helm charts and Kubernetes environments.
• Practical knowledge of vulnerability management, security automation and policy enforcement.
• Experience evaluating security tools and conducting proof‑of‑concept activities.

Required skills

• DevSecOps security
• CI/CD pipeline security
• Infrastructure as Code (IaC) review
• Helm chart security
• Static Application Security Testing (SAST)
• Cloud security (IAM, network, encryption, logging)
• Kubernetes security
• Vulnerability management
• Security automation (OPA/Gatekeeper)
• Security tool evaluation and POC execution