DEVSECOPS ENGINEER

DevSecOps Engineer About The Role We are seeking a DevSecOps Engineer to lead the design, implementation, and continuous improvement of our secure infrastructure and deployment pipelines. This role requires a strategic thinker with hands-on expertise in Linux server environments, multi-tenant hosting security, CI/CD automation, and advanced web application security practices. You will be responsible for strengthening our hosting ecosystem, reducing security risks, automating secure deployments, and mentoring junior engineers. Key Responsibilities Security Architecture & Strategy Design and implement secure infrastructure architecture Develop and enforce security standards across hosting environments Conduct threat modeling and risk assessments Lead vulnerability management programs Infrastructure & Hosting Security Harden Linux servers (Ubuntu/CentOS) Secure and optimize WHM/cPanel multi-client environments Configure and maintain: ModSecurity with OWASP rules CSF / Fail2Ban Server-level intrusion detection Manage database hardening and access control policies Implement isolation strategies for shared hosting accounts CI/CD & Secure Automation Architect secure CI/CD pipelines Integrate automated security testing into build pipelines Implement secrets management and secure credential storage Automate deployments with rollback strategies Lead DevSecOps best practices across teams Application Security Oversight Prevent and mitigate vulnerabilities such as: SQL Injection XSS CSRF RCE Review secure coding practices across PHP, WordPress, Laravel, and custom applications Perform security audits and penetration testing Monitoring & Incident Response Establish security monitoring and alerting systems Lead incident response and forensic investigations Conduct post-incident analysis and mitigation planning Maintain compliance documentation Leadership & Mentorship Guide junior DevOps and security engineers Establish internal security training programs Collaborate with developers and system administrators Report security posture to management Technical Requirements 5+ years in DevOps, Security Engineering, or Infrastructure roles Advanced Linux system administration Strong experience with WHM/cPanel in multi-client environments CI/CD tools (GitHub Actions, GitLab CI, Jenkins) Deep understanding of: LAMP/LEMP stacks MySQL/MariaDB security Web application security Experience with WAF implementation and tuning Knowledge of cloud infrastructure (DigitalOcean preferred) Experience with infrastructure automation (Bash, scripting, etc.) Preferred Qualifications Experience in high-availability hosting environments Familiarity with GDPR, CCPA, and web compliance frameworks Security certifications (OSCP, CEH, Security+, CISSP) are a plus Experience with container security (Docker) Experience building DevSecOps culture within teams What We Offer Leadership-level technical ownership Opportunity to shape company-wide security strategy Competitive compensation Flexible work environment Career growth into Security Architect or Head of Security roles