DevSecOps / AppSec Lead

📍Almaty DevSecOps / AppSec Lead

Seeking a DevSecOps / AppSec Lead to help establish a full SSDLC process from requirements and architecture analysis to automated security checks in CI/CD, setting up quality gates, code reviews, and implementing modern AppSec tools.

Responsibilities

• Build SSDLC processes;
• Implement AppSec practices and tools (SAST, DAST, SCA);
• Configure SonarQube, quality gates, and security gates;
• Integrate AppSec into the development process using the Shift Left approach;
• Develop the AppSec team and interact with development teams;
• Integrate local LLM models into the development pipeline.

Requirements

• 3+ years of experience in AppSec, DevSecOps, or Application Security;
• Understanding of SSDLC and secure development practices;
• Experience implementing SAST, SCA, DAST, and working with SonarQube;
• Understanding of GitLab CI/CD and configuring quality gates;
• Knowledge of OWASP Top 10, ASVS, CWE, CVE, and CVSS;
• Experience interacting with development teams and preparing internal documentation.

Resumes can be sent to the email address: recruiter contact

Email subject: DevSecOps