Portfolio

DevSecOps implementation

DevSecOps implementation — Security checks earlier in development.

Background

TechNex Solutions (anonymized) used a waterfall delivery model. Security review arrived late, which created rework.

Problem

Security was treated as a final gate instead of part of each iteration.

What I implemented

  • Azure DevOps CI/CD pipelines
  • Selenium automated testing
  • SonarQube checks in the pipeline for earlier vulnerability detection
  • Jira for iterative project management

Outcome

Release cycles shortened and issues were found earlier. “Fewer late findings” means earlier detection in the pipeline — not proof that production risk disappeared.