Devops Engineer

Own and lead analysis and triage of vulnerability scan results from multiple security tools, investigating findings to understand actual risk and exploitability in context. Work directly with engineering teams to understand remediation options, evaluate fix approaches, and coordinate timely resolution of security issues. Remediate vulnerabilities hands-on: upgrade dependencies, rebuild container images with patched components, and contribute fixes directly to product codebases. Test fixes thoroughly and verify remediation by re-scanning before and after deployment. Route vulnerabilities to component owners and actively track remediation progress, following up to ensure completion within required timeframes. Support FedRAMP continuous monitoring processes, including monthly POA&M management and compliance reporting. Engage with customer security teams to address vulnerability findings, reconcile scan results, and support deployment approvals. Maintain and extend our vulnerability management tooling and automation infrastructure. Build automations and processes that eliminate manual work and support continuous security improvement across the platform. Assess risk levels and communicate security findings to technical and non-technical stakeholders. Support container image security controls and Kubernetes security policies across customer environments. Contribute to security documentation, runbooks, and compliance artifacts for customer audits. Participate in security incident response and customer escalations as needed. This position is based in Sri Lanka.