The Senior DevSecOps Engineer will play a crucial role in bridging development, security, and operations ensuring that Mountain Group’s technology ecosystem remains secure, resilient, and compliant with UK cyber standards.

You will manage and improve security automation within CI/CD pipelines, manage cloud security posture, perform vulnerability and risk assessments, and respond to incidents in collaboration with the UK Cyber Team. You’ll also take ownership of security infrastructure in the Islamabad office, mentoring junior engineers and embedding a “security-first” culture across teams.

• Review and secure CI/CD pipelines, integrating security controls at every stage (DevSecOps).
• 
  
• Manage secure infrastructure on Azure/GCP, implementing least-privilege IAM policies and network segmentation.
• 
  
• Review and maintain WAFs, firewalls, and VPNs to protect critical cloud workloads.

• Conduct regular vulnerability assessments and security posture reviews for systems and cloud environments.
• Support audit and penetration testing activities with external partners.

• Mentor junior Cyber Security engineers within the Islamabad office on secure development and deployment practices.
• Serve as the local cybersecurity focal point, coordinating with UK teams to align with corporate security strategy.
• Promote DevSecOps culture across teams, integrating automation, visibility, and accountability into all operations.

• 5+ years of experience in Cloud Infrastructure, or DevSecOps roles with a strong cybersecurity focus.
• Proven experience with Azure, or GCP security services and compliance configurations.
• Proficiency in Docker and Kubernetes, including security hardening and runtime protection.
• Strong scripting and automation skills in Python, Bash, or PowerShell.
• Hands-on experience with security tools such as Snyk, Trivy, SonarQube, OWASP ZAP, or Burp Suite.
• Deep understanding of network security, firewall management, VPNs, and Zero Trust principles.

• Professional certifications such as:
• AWS Certified Security / DevOps Engineer
• Microsoft Certified: DevOps Engineer Expert
• Certified Kubernetes Security Specialist (CKS)
• CompTIA Security+, CEH, or CISSP
• Experience supporting distributed teams across multiple time zones.

Prior experience in e-commerce or logistics environments with high security and uptime requirements.

• Competitive salary and performance-based growth opportunities.
• Collaboration with a UK-based Cybersecurity & Infrastructure Team.
• Opportunity to lead and shape security automation and cloud strategy.