Senior DevSecOps Engineer

Nortal is a global digital transformation leader with 25 years of experience, delivering cutting-edge solutions for Fortune 500 companies, governments, and healthcare institutions. We are currently seeking a Senior DevSecOps Engineer to join our team and take ownership of our operational attack surface, ensuring robust security across our cloud, network, and infrastructure environments.

Key responsibilities

• Map existing CI/CD pipelines and security scanners to identify gaps and optimize current workflows.
• Develop a centralized triage process that aggregates scanner outputs, removes duplicates, and ranks risks based on real-world impact.
• Integrate SAST, software composition analysis, and infrastructure-as-code scanning into pipelines to ensure security gates are maintained.
• Establish repository hygiene rules and provide regular progress reporting to leadership.
• Lead cloud and infrastructure engineers to drive vulnerability management initiatives within the DevOps team.

Requirements

• Approximately 6 years of professional experience in DevOps or platform engineering with a strong focus on DevSecOps.
• Proven ability to build and maintain CI/CD security gates using tools like GitHub Actions or Jenkins.
• Expertise in vulnerability management at scale, including risk-based prioritization and remediation tracking.
• Strong communication skills with the ability to translate complex technical findings into actionable reports for non-technical stakeholders.

What we offer

• Opportunity to work on high-impact global projects with a team of 2,700+ experts.
• A fully remote work environment that supports professional growth and technical excellence.
• Exposure to advanced security practices, including SBOM generation, supply chain security, and container security.
• Collaborative culture focused on strategic consulting, software engineering, and innovative design.