DevSecOps/Application Security Engineer

DevSecOps / Application Security Engineer Role : DevSecOps Engineer CodeQL / Coverity / GitHub Actions Experience : 46 Years Role Overview : We are looking for an experienced DevSecOps / Application Security Engineer with strong expertise in GitHub Actions, CodeQL, Coverity, C/C++ development, and secure CI/CD practices. The candidate will be responsible for building and optimizing CI pipelines, integrating security and code-quality scanning into the software development lifecycle, troubleshooting scanning and pipeline issues, and helping engineering teams adopt effective shift-left security practices. Key Responsibilities : - Design, develop, maintain, and enhance GitHub Actions CI/CD pipelines for C/C++ and Java applications. - Integrate and manage CodeQL and Coverity security/static-analysis scans within pull-request and scheduled CI workflows. - Configure and optimize security scanning rules to improve detection accuracy and minimize false positives. - Develop custom CodeQL queries and Coverity rules where required. - Automate security finding triage, reporting, remediation tracking, PR checks, dashboards, and ticketing workflows. - Manage CI scan infrastructure, including runners, containers, and cloud-based environments. - Secure and manage CI/CD secrets and credentials according to security best practices. - Improve pipeline execution time through optimization, caching, parallel execution, and other CI efficiency techniques. - Investigate and resolve CI/CD pipeline failures, compiler issues, and static-analysis tool failures. - Work closely with development, security, DevOps, and platform engineering teams to resolve security findings and improve code quality. - Promote shift-left security by integrating security checks earlier in the development lifecycle. - Prepare technical documentation, onboarding guides, operational procedures, and knowledge-sharing material. - Support the transition of stable CI/security processes to the platform engineering team. - Contribute to organization-wide application security and software quality improvement initiatives. Mandatory Technical Skills : - Strong hands-on C/C++ development and debugging, particularly modern C++. - Production experience with CodeQL mandatory. - Hands-on experience with Coverity is highly desirable. - Strong experience with GitHub Actions or equivalent CI/CD automation platforms. - Familiarity with GitHub Advanced Security (GHAS). - Strong scripting skills using Bash and/or Python. - Experience with Docker. - Working knowledge of Kubernetes. - Basic knowledge of cloud platforms. - Experience troubleshooting CI/CD and static-analysis failures. - Understanding of secure software development and shift-left security practices. Preferred / Nice-to-Have Skills : - Development of custom CodeQL queries. - Creation or customization of Coverity rules. - Enterprise-scale CI/CD optimization. - Build caching and distributed build environments. - Experience with observability, monitoring, and engineering metrics. - Knowledge of build systems such as : 1. Gradle 2. Make 3. CMake 4. Bazel 5. NMake - Familiarity with development tools and compilers such as : 1. GCC 2. Protoc 3. Microsoft Visual Studio / CL Key Functional Areas : - DevSecOps | Application Security | CI/CD Automation | Static Code Analysis | Secure SDLC | Shift-Left Security Primary Tools & Technologies : - GitHub Actions | CodeQL | Coverity | GHAS | C/C++ | Java | Bash | Python | Docker | Kubernetes | Cloud | CI/CD Soft Skills : - Strong analytical and troubleshooting capabilities. - Effective communication with development, security, and platform teams. - Ability to drive remediation activities across multiple engineering teams. - Self-motivated and capable of independently owning security and quality initiatives. - Ability to work with technical and leadership stakeholders to implement organization-wide improvements. - Strong documentation and knowledge-sharing skills. Experience : - 4 to 6 years of relevant experience in DevSecOps, Application Security, CI/CD Engineering, or Software Security Engineering. Essential Skills : - CodeQL, GitHub Actions, C/C++ Debugging, DevSecOps, CI/CD, Static Application Security Testing (SAST) Desirable Skills : - Coverity, GHAS, Docker, Kubernetes, Python/Bash, Cloud, Custom CodeQL Queries, CI Optimization