About the Role: We are looking for a passionate and skilled DevSecOps Engineer to join our technical team. In this role, you will be responsible for integrating security practices into our CI/CD pipelines, hardening our infrastructure, and ensuring our deployment environments are secure by design.Special Note: Are you currently a strong DevOps Engineer looking to transition fully into the security and DevSecOps domain? We highly encourage you to apply! We value strong infrastructure skills and will support your growth in security.
Key Responsibilities:
Design, implement, and maintain secure CI/CD pipelines.
Perform deep OS-level and container-level hardening.
Automate security controls, vulnerability scanning, and compliance checks.
Collaborate with the development and operation teams to promote a "Shift-Left" security culture.
Monitor and respond to security incidents within the infrastructure.
Must-Have Qualifications (The Essentials):
Advanced Linux Administration: Expert-level knowledge of Linux operating systems.
Linux Hardening: Deep understanding and hands-on experience in Linux OS hardening (e.g., CIS benchmarks, PAM configuration, SELinux/AppArmor, kernel tuning).
Containerization & Security: Expert knowledge of Docker and Docker Compose, with a strong focus on container security, image scanning, and Docker hardening.
CI/CD & Automation: Strong proficiency in building and maintaining CI/CD pipelines (e.g., GitLab CI, Jenkins) and expert-level skills in Configuration Management tools, specifically Ansible.
Security Mindset: Good understanding of network security, IAM, and common vulnerabilities (e.g., OWASP Top 10).
Scripting: Proficiency in writing automation scripts (Bash, Python, Go ,etc.).
Nice-to-Have (Bonus Points):
Experience with Kubernetes (K8s) administration and Kubernetes security practices.
Familiarity with integrating SAST, DAST, and SCA tools (e.g., SonarQube, Trivy, Clair) into pipelines.
Knowledge of Infrastructure as Code (IaC) security (e.g., scanning Terraform or Ansible scripts).
مهسان یک شرکت تولید کننده محصولات نرمافزاری است، که به صورت تخصصی در زمینه سامانههای ارتباطی نوین و امنیت شبکه فعالیت میکند.
همکاران ما در مهسان هر یک در کار خود متخصص هستند و تمامی مناسبات و فعالیتها، حرفهای دنبال میشود.
ما تلاش کردهایم فضاهای مناسب برای تمام نیازهای کاری را فراهم کنیم. شادابی محیط کار برای ما اهمیت ویژهای داشته است. همکاران ما کار خود را متعهدانه انجام میدهند. هدف همه یکی است و برای رسیدن به آن تمام تلاشمان را به کار میگیریم.