Here are the main dimensions our DevOps are knowledgeable at. 

To handle security we use external tools to scan our architecture, application, for example Drata is used to keep general security concept. 

Snyk, JFrog, Trivy, Github Security help us to not allow any vulnerability in our code. Also we check code by Sonarqube.