DevOps/Application Security Engineer - CodeQL & Coverity

Experience : 4-6 YearsEmployment Type : Full-TimeWe are looking for a skilled DevOps / Application Security Engineer with strong experience in CI/CD automation, code scanning, and secure development practices. The ideal candidate will play a key role in building and maintaining scalable pipelines while driving shift-left security initiatives across the organization.Key Responsibilities : - Evaluate, build, and maintain GitHub Actions pipelines to compile C/C++/Java projects and run CodeQL & Coverity scans (PR gates and scheduled runs).- Tune CodeQL queries and Coverity rules to reduce false positives and develop custom detections where required.- Automate triage, reporting, and remediation workflows (PR checks, ticketing systems, dashboards).- Manage scan infrastructure (runners, containers, cloud), secure CI secrets, and optimize pipeline performance.- Collaborate with cross-functional teams to promote secure coding practices and enable shift-left strategies.- Develop documentation, onboarding guides, and best practices for engineering teams.- Troubleshoot CI/CD and analyzer issues and transition stable processes to platform teams.Must-Have Skills : - Strong hands-on experience with C++ (modern) debugging.- Proven experience with CodeQL (mandatory) and/or Coverity in production environments.- Deep expertise in GitHub Actions or similar CI/CD tools (GHAS familiarity preferred).- Proficiency in scripting (Bash / Python).- Experience with Docker, Kubernetes, and cloud platforms.- Strong communication skills with the ability to drive cross-team collaboration.- Self-motivated with a focus on improving security and code quality at an organizational level.Nice-to-Have Skills : - Experience writing custom CodeQL queries and Coverity rules.- Knowledge of enterprise CI optimization (caching, distributed builds).- Familiarity with observability and monitoring tools.- Experience with build systems such as Gradle, Make, CMake, Bazel, NMake.- Knowledge of compilers like GCC, Protoc, Visual Studio CL. (ref:hirist.tech)