Description
Cashea is hiring a DevSecOps Engineer (Application Security) to integrate security throughout the software development lifecycle. The role focuses on securing CI/CD pipelines with SAST, SCA, and DAST tools, establishing security gates, automating checks with GitHub Actions, managing vulnerabilities, supporting threat modeling, and collaborating with development, infrastructure, cloud, and offensive teams. The position requires application security or DevSecOps experience, GitHub and GitHub Actions knowledge, SAST/SCA/DAST familiarity, CI/CD understanding, OWASP knowledge, Docker and Kubernetes experience, Python or another programming language, cloud security knowledge, and the ability to communicate technical risks.
