Associate DevSecOps Engineer, Platform and Tooling

Role: Associate DevSecOps Engineer supporting application security within a global biopharma enterprise. Objectives: build and implement a scalable Application Security program, integrating security testing tools into development pipelines, and automating workflows to enhance secure software delivery. Responsibilities: manage and support security testing tools (SAST, DAST, IAST, SCA), administer Application Security Posture Management (ASPM), integrate security tooling with CI/CD pipelines (e.g., GitHub Actions, Azure DevOps), and develop automation scripts using programming languages like Python. Qualifications: Bachelor's or Master’s Degree with 4-5 years of experience; 2+ years’ hands-on DevSecOps/DevOps/SRE expertise; proficient in integrating security tools into CI/CD environments and scripting automation workflows. Preferred: experience with ASPM platforms, container security solutions, image scanning, dependency validation tools (e.g., Snyk, JFrog), and enterprise-scale administration of security tools. High-Value: focus on secure software development and automation in a regulated biopharma setting; emphasis on security tooling integration within development pipelines. Work Setup: not specified; likely hybrid or remote based on the company's usual practices.