Application & Cloud Security Engineer

Responsibilities: DevSecOps & Pipeline Security: Build and maintain security automation in CI/CD pipelines. Run code scanning, dependency checks, and container image scanning. Manage secret storage, rotation, and detection. Application & API Security: Review code and help teams follow secure coding practices. Protect APIs with authentication, rate limits, and validation. Support developers in fixing identified vulnerabilities. Cloud Security: Manage IAM roles, access control, and least-privilege policies. Configure Cloudflare WAF and cloud firewall rules. Monitor cloud configurations and enforce security best practices. Monitoring & Incident Response: Track vulnerabilities, alerts, and suspicious activities. Support incident response and root-cause analysis. Maintain dashboards and automated alerts. Compliance & Governance: Support ISO27001, SOC2, or other compliance requirements. Keep documentation, audit logs, and security reports up to date. Work with the Security Architect on long-term improvements.