DevSecOps and Infrastructure Engineer

Company: Big Byte Insights

Job Title: DevSecOps and Infrastructure Engineer

Job Type: Full-time  (Onsite)

Location: Cantt, Lahore 

𝗔𝗯𝗼𝘂𝘁 𝘁𝗵𝗲 𝗥𝗼𝗹𝗲

This role owns 𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝗗𝗲𝘃𝗦𝗲𝗰𝗢𝗽𝘀 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 from day one. Equally important, we need someone who can grow into broader infrastructure and cloud security over time. We're optimizing for strong fundamentals plus a demonstrated ability to pick up new security domains independently—not for someone who already checks every box.

𝗞𝗲𝘆 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗶𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀

•             Implement and manage SAST, DAST, SCA, and container scanning tools (e.g., Snyk, Semgrep, Trivy, SonarQube).

•             Secure CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins) with security gates and SBOM generation.

•             Conduct threat modeling and security reviews of applications, APIs, and cloud-native workloads.

•             Administer Cloudflare security services, including WAF, rate limiting, DDoS protection, and origin protection.

•             Manage application secrets using HashiCorp Vault or GCP/AWS Secrets Manager, and eliminate hardcoded credentials.

•             Coordinate penetration testing engagements and track remediation of identified vulnerabilities.

•             Maintain secure coding standards aligned with the OWASP Top 10.

•             Deliver secure coding training and lead a Security Champions program.

𝗥𝗲𝗾𝘂𝗶𝗿𝗲𝗺𝗲𝗻𝘁𝘀 (𝗠𝘂𝘀𝘁-𝗛𝗮𝘃𝗲)

•             3+ years of experience is required for this role

•             Strong understanding of CI/CD systems and container/Kubernetes security.

•             Proficiency in scripting using Python, Go, or Bash.

•             Hands-on experience with Google Cloud Platform (GCP).

•             Demonstrated ability to quickly learn new security domains or tools with minimal guidance.

•             Candidates should be prepared to share a specific example during the application or interview

process.

𝙇𝙚𝙖𝙧𝙣𝙞𝙣𝙜 & 𝙂𝙧𝙤𝙬𝙩𝙝 𝙏𝙧𝙖𝙘𝙠(𝙉𝙤𝙩 𝙍𝙚𝙦𝙪𝙞𝙧𝙚𝙙 𝙤𝙣 𝘿𝙖𝙮 𝙊𝙣𝙚 — 𝘽𝙪𝙩 𝙔𝙤𝙪 𝙎𝙝𝙤𝙪𝙡𝙙 𝘽𝙚 𝘼𝙗𝙡𝙚 𝙩𝙤 𝙋𝙞𝙘𝙠 𝙏𝙝𝙚𝙨𝙚 𝙐𝙥)

We don't expect a new hire to already know everything below. We do expect curiosity, adaptability, and a proven track record of self-directed learning.

𝗡𝗲𝘁𝘄𝗼𝗿𝗸 & 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆

•             Secure network architecture, including network segmentation, VLANs, and firewall policy management (Palo Alto, Fortinet, SonicWall).

•             Work with Active Directory, Group Policy, certificate management, and secure remote access using ZTNA (Zero Trust Network Access) / Zero Trust VPN.

•             Willingness to learn and work with additional cloud platforms such as AWS and Azure.

Interested candidates share their resume at maria@bigbyteinsights.com