DevSecOps Engineer - Cloud Infrastructure

The core responsibilities for the job include the following :

Cloud Security and Infrastructure :

- Secure and manage cloud environments in GCP, AWS, and Azure.

- Implement best practices for cloud security, IAM, and compliance.

- Monitor and optimize cloud workloads for security and efficiency.

Security Automation and DevOps Integration :

- Automate security processes using Ansible, Azure DevOps, and other tools.

- Integrate security checks into CI/CD pipelines to enable secure deployments.

- Conduct vulnerability assessments and harden infrastructure.

Threat Detection and Incident Response :

- Deploy and manage IDS/IPS solutions to detect and prevent cyber threats.

- Monitor security logs and respond to incidents proactively.

- Work with SOC teams to enhance real-time threat detection.

Compliance and Risk Management :

- Ensure adherence to industry security standards and compliance frameworks.

- Conduct gap assessments and implement remediation plans.

- Maintain security documentation and audit readiness.

Collaboration and Continuous Improvement :

- Work closely with Engineering, DevOps, and Security teams to drive security initiatives.

- Stay updated with emerging security trends and threats.

- Advocate for a DevSecOps-first culture within the organisation.

Requirements :

- 5 to 7 years of experience in DevSecOps, Cloud Security, or Infrastructure Security.

- Strong expertise in GCP, AWS, and Azure security best practices.

- Proficiency in Linux administration and security hardening.

- Hands-on experience with Ansible, Azure DevOps, and CI/CD pipelines.

- Familiarity with security tools like IDS/IPS, SIEM, and vulnerability scanners.

- Knowledge of security frameworks (ISO 27001 NIST, CIS, etc. ).

- Experience with JIRA for task management and tracking.

- Strong problem-solving skills and ability to work in a fast-paced environment.

Preferred Qualifications (Nice to Have) :

- Certifications like AWS Security Specialty, GCP Security Engineer, CISSP, CEH, or CKA.

- Experience with IaC security tools (Terraform, CloudFormation).

- Knowledge of container security (Docker, Kubernetes).