Job Description
Role Summary
Operationalize DevSecOps security controls across SDLC and CI/CD using Azure DevOps Server, ensuring enforceable security gates, vulnerability lifecycle management, and audit-ready evidence.
Key Responsibilities
· Configure and tune Fortify SAST/DAST, define thresholds and exception workflow.
· Automate the renewal and deployment of SSL/TLS certificates using tools like HashiCorp Vault and Cert-Manager in Kubernetes to prevent downtime and security risks.
· Integrate SBOM generation tools into the CI/CD pipeline to track component dependencies, license compliance, and vulnerabilities, providing visibility into the software supply chain.
· Implement image signing and verification using tools like Sigstore/Cosign to ensure code integrit...