2 months ago
Colombo, Sri LankaMid Level
Responsibilities
- Analyze and triage vulnerability scan findings from multiple security tools, including assessment of exploitability and contextual risk.
- Coordinate remediation with engineering teams and component owners, tracking fixes through completion.
- Upgrade dependencies, rebuild container images, contribute product-code fixes, and verify remediation through testing and rescanning.
- Support FedRAMP continuous monitoring, monthly POA&M management, compliance reporting, and customer audit artifacts.
- Maintain vulnerability-management tooling and automation infrastructure and build processes that reduce manual work.
- Support container image security controls, Kubernetes security policies, incident response, and customer escalations.
- Engage customer security teams to reconcile findings and support deployment approvals.
- Communicate security findings to technical and non-technical stakeholders and maintain security documentation and runbooks.
Requirements
- 2–4 years of experience in application security, product security, or DevSecOps roles.
- 3+ years of software engineering experience.
- Strong coding skills in at least two languages, such as Python, JavaScript, Go, Ruby, or Java.
- Ability to read, write, debug, and deploy code.
- Experience with dependency management, CI/CD, Git, security scanning tools, and container security.
- Strong understanding of vulnerability management, CVE assessment, exploit paths, affected components, and contextual risk.
- Familiarity with Kubernetes security concepts and best practices.
- Experience with compliance frameworks such as FedRAMP, SOC2, ISO 27001, or banking regulations is preferred.
- Strong written and verbal communication, cross-functional coordination, follow-through, organization, and customer focus.
- Ability to work effectively in a remote-first environment.
Benefits
- Market-leading total rewards.
- Remote-friendly culture and flexible working environment.
- World-class team and career-growth opportunities.
- Position based in Sri Lanka.
Tech Stack
AWSCircleCIGitGitHub ActionsGitLab CI/CDGoGoogle Cloud PlatformJavaJavaScriptJenkinsKubernetesMavennpmPythonRubySnowflake
Categories
