DevSecOps & Cloud Security Consultant

Role: DevSecOps & Cloud Security Consultant Experience: 5–7+ Years Location: Muscat, Oman Work Mode: Full-time, Onsite Notice Period: Immediate to 15 Days Preferred Relocation: Must be willing to relocate to Muscat Communication: Excellent communication skills required Qualification: Graduate Certifications: CEH / CISSP / OSCP / CISA / CISM preferred About the Role We are looking for an experienced DevSecOps & Cloud Security Consultant to assess, strengthen, and implement security controls across CI/CD pipelines, cloud infrastructure, Kubernetes environments, and application delivery workflows. The ideal candidate should have hands-on experience in DevSecOps security assessments, Infrastructure as Code (IaC) reviews, Helm chart security, source code security analysis (SAST), cloud security configurations, vulnerability management, and security automation. The candidate should also be experienced in policy enforcement using OPA/Gatekeeper and evaluating security tools through proof-of-concept (POC) activities. Roles and Responsibilities • Assess and strengthen security across CI/CD pipelines and DevSecOps workflows. • Review Infrastructure as Code (IaC) templates to identify security risks, misconfigurations, excessive permissions, hardcoded credentials, and exposed secrets. • Conduct manual and automated security reviews of Kubernetes Helm charts. • Perform source code security reviews using Static Application Security Testing (SAST) tools. • Assess cloud security configurations, Identity and Access Management (IAM), network controls, encryption, and logging. • Review Kubernetes security controls, workload configurations, access controls, and container deployment practices. • Implement or validate security automation and policy enforcement using OPA/Gatekeeper. • Manage vulnerabilities, assess risks, track remediation activities, and validate fixes through retesting. • Evaluate security tools and conduct POCs across cloud, application, container, API, and DevSecOps security. • Prepare security assessment reports, document findings, assign risk ratings, and recommend remediation measures. • Collaborate with development, infrastructure, cloud, and Information Security teams to implement security best practices. • Support secure software delivery by integrating automated security checks and controls into development and deployment workflows. Candidate Requirements • 5–7+ years of relevant experience in DevSecOps and cloud security. • Hands-on experience securing CI/CD pipelines and software delivery workflows. • Experience reviewing IaC templates, Helm charts, and source code for security vulnerabilities. • Strong knowledge of cloud security configurations and Kubernetes environments. • Practical experience in vulnerability identification, prioritisation, remediation, and revalidation. • Experience implementing or validating security policies using OPA/Gatekeeper. • Experience evaluating security tools and supporting POC activities. • Graduate qualification; relevant security certifications are preferred. • Willingness to work full-time onsite in Muscat, Oman. • Must be willing to relocate to Muscat. • Immediate to 15 days' notice period preferred. • Excellent communication skills are mandatory. • Contract duration is initially one year, with the possibility of extension. Primary Skills – Must Have • DevSecOps Security • CI/CD Pipeline Security • Infrastructure as Code (IaC) Security • Kubernetes Security • Helm Chart Security • Source Code Security Review (SAST) • Cloud Security and IAM • Vulnerability Management and Risk Assessment • Security Automation • OPA/Gatekeeper Policy Enforcement • Security Tool Evaluation and POC Execution • Security Assessment and Remediation Reporting Preferred Certifications • CEH – Certified Ethical Hacker • CISSP – Certified Information Systems Security Professional • OSCP – Offensive Security Certified Professional • CISA – Certified Information Systems Auditor • CISM – Certified Information Security Manager Company Benefits: Bachelor accommodation, airfare, and visa sponsored by the company. Important: Candidates must be willing to relocate to Muscat and work full-time onsite. Immediate to 15 days' notice period is preferred. Show more Show less

5–7+ years of relevant experience in DevSecOps and cloud security. Hands-on experience securing CI/CD pipelines and software delivery workflows. Experience reviewing IaC templates, Helm charts, and source code for security vulnerabilities. Strong knowledge of cloud security configurations and Kubernetes environments. Practical experience in vulnerability identification, prioritisation, remediation, and revalidation. Experience implementing or validating security policies using OPA/Gatekeeper. Experience evaluating security tools and supporting POC activities. Graduate qualification; relevant security certifications are preferred. Willingness to work full-time onsite in Muscat, Oman. Must be willing to relocate to Muscat. Immediate to 15 days' notice period preferred. Excellent communication skills are mandatory.

Assess and strengthen security across CI/CD pipelines and DevSecOps workflows. Review Infrastructure as Code (IaC) templates to identify security risks, misconfigurations, excessive permissions, hardcoded credentials, and exposed secrets. Conduct manual and automated security reviews of Kubernetes Helm charts. Perform source code security reviews using Static Application Security Testing (SAST) tools. Assess cloud security configurations, Identity and Access Management (IAM), network controls, encryption, and logging. Review Kubernetes security controls, workload configurations, access controls, and container deployment practices. Implement or validate security automation and policy enforcement using OPA/Gatekeeper. Manage vulnerabilities, assess risks, track remediation activities, and validate fixes through retesting. Evaluate security tools and conduct POCs across cloud, application, container, API, and DevSecOps security. Prepare security assessment reports, document findings, assign risk ratings, and recommend remediation measures. Collaborate with development, infrastructure, cloud, and Information Security teams to implement security best practices. Support secure software delivery by integrating automated security checks and controls into development and deployment workflows.