If you are passionate about cloud security, Kubernetes hardening, CI/CD security, and driving remediation from discovery to verified closure, this role is for you.
🔐 What You’ll Be Doing
📍 Location: Onsite – Nugegoda
🧑💻 Experience: Minimum 3+ Years
- Own and manage the end-to-end remediation lifecycle of security findings across our cloud-native platform.
- Work closely with engineering and platform teams to resolve findings identified through VAPT engagements, audits, and automated security scanners.
- Implement and enforce security controls within GitLab CI/CD pipelines.
- Manage and remediate vulnerabilities related to GCP/GKE environments, IAM policies, RBAC, network policies, containers, and cloud posture configurations.
- Drive remediation activities for SAST, DAST, CSPM, dependency scanning, and secrets exposure findings.
- Maintain audit-ready evidence and security reporting for internal and external stakeholders.
- Apply security best practices aligned with CIS Benchmarks, OWASP Top 10, and modern DevSecOps standards.
🛠 Required Skills & Experience
- Strong hands-on experience with GCP and GKE.
- Experience with Kubernetes security and hardening.
- Hands-on knowledge of GitLab CI/CD pipelines.
- Experience with Terraform, Bash scripting, and Infrastructure as Code (IaC) practices.
- Good understanding of cloud security, application security, and container security.
- Familiarity with vulnerability management and remediation workflows.
- Experience working with security scanners and assessment reports.
- Strong ownership mindset with the ability to drive issues through to closure.
🎯 Preferred Certifications
- GCP Professional Cloud Security Engineer
- CKS (Certified Kubernetes Security Specialist)
- CEH (Certified Ethical Hacker)
- CompTIA Security+
💡 Why Join Us?
At hSemuTechHub, you’ll work on modern cloud platforms, collaborate with talented engineers, and contribute directly to building secure and scalable systems. We value ownership, innovation, continuous learning, and practical engineering excellence.
📩 How to Apply
Interested candidates can send their resumes to: careers@hsemutechhub.com
Please include “Senior DevSecOps Engineer” in the subject line.