DevSecOps

DevSecOps combines development (writing software), security, and operations (running software in production). The idea is to build security into every stage of making and delivering software, rather than checking it only at the end. In practice, DevSecOps engineers add automatic checks to the pipelines that build and release code, such as scanning for known vulnerable components, catching passwords or keys accidentally written into code, and checking cloud settings for risky configurations. They help developers fix issues early, when fixes are cheapest. The role suits people who enjoy both building things and protecting them, and it requires familiarity with code, cloud platforms and automation tools.