DevSecOps and Infrastructure Engineer
Views: 25
Posted: 2026-07-02
Expires: 2026-07-16
ExpiredCompany: Big Byte Insights
Job Title: DevSecOps and Infrastructure Engineer
Job Type: Full-time (Onsite)
Location: Cantt, Lahore
๐๐ฏ๐ผ๐๐ ๐๐ต๐ฒ ๐ฅ๐ผ๐น๐ฒ
This role owns ๐ฎ๐ฝ๐ฝ๐น๐ถ๐ฐ๐ฎ๐๐ถ๐ผ๐ป ๐ฎ๐ป๐ฑ ๐๐ฒ๐๐ฆ๐ฒ๐ฐ๐ข๐ฝ๐ ๐๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ from day one. Equally important, we need someone who can grow into broader infrastructure and cloud security over time. We're optimizing for strong fundamentals plus a demonstrated ability to pick up new security domains independentlyโnot for someone who already checks every box.
๐๐ฒ๐ ๐ฅ๐ฒ๐๐ฝ๐ผ๐ป๐๐ถ๐ฏ๐ถ๐น๐ถ๐๐ถ๐ฒ๐
โข Implement and manage SAST, DAST, SCA, and container scanning tools (e.g., Snyk, Semgrep, Trivy, SonarQube).
โข Secure CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins) with security gates and SBOM generation.
โข Conduct threat modeling and security reviews of applications, APIs, and cloud-native workloads.
โข Administer Cloudflare security services, including WAF, rate limiting, DDoS protection, and origin protection.
โข Manage application secrets using HashiCorp Vault or GCP/AWS Secrets Manager, and eliminate hardcoded credentials.
โข Coordinate penetration testing engagements and track remediation of identified vulnerabilities.
โข Maintain secure coding standards aligned with the OWASP Top 10.
โข Deliver secure coding training and lead a Security Champions program.
๐ฅ๐ฒ๐พ๐๐ถ๐ฟ๐ฒ๐บ๐ฒ๐ป๐๐ (๐ ๐๐๐-๐๐ฎ๐๐ฒ)
โข 3+ years of experience is required for this role
โข Strong understanding of CI/CD systems and container/Kubernetes security.
โข Proficiency in scripting using Python, Go, or Bash.
โข Hands-on experience with Google Cloud Platform (GCP).
โข Demonstrated ability to quickly learn new security domains or tools with minimal guidance.
โข Candidates should be prepared to share a specific example during the application or interview
process.
๐๐๐๐ง๐ฃ๐๐ฃ๐ & ๐๐ง๐ค๐ฌ๐ฉ๐ ๐๐ง๐๐๐ (๐๐ค๐ฉ ๐๐๐ฆ๐ช๐๐ง๐๐ ๐ค๐ฃ ๐ฟ๐๐ฎ ๐๐ฃ๐ โ ๐ฝ๐ช๐ฉ ๐๐ค๐ช ๐๐๐ค๐ช๐ก๐ ๐ฝ๐ ๐ผ๐๐ก๐ ๐ฉ๐ค ๐๐๐๐ ๐๐๐๐จ๐ ๐๐ฅ)
We don't expect a new hire to already know everything below. We do expect curiosity, adaptability, and a proven track record of self-directed learning.
๐ก๐ฒ๐๐๐ผ๐ฟ๐ธ & ๐๐ฑ๐ฒ๐ป๐๐ถ๐๐ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐
โข Secure network architecture, including network segmentation, VLANs, and firewall policy management (Palo Alto, Fortinet, SonicWall).
โข Work with Active Directory, Group Policy, certificate management, and secure remote access using ZTNA (Zero Trust Network Access) / Zero Trust VPN.
โข Willingness to learn and work with additional cloud platforms such as AWS and Azure.
Interested candidates share their resume at maria@bigbyteinsights.com
๐ Lahore@Big Byte Insights#DevSecOps and Infrastructure Engineer๐งณ Experienced Required