Hiring DevSecOpsEngineer / Security Analyst to join our team at Neology PSquare TechSystems (part of Neology Inc www.neology.com).

Number of Open Positions : 1.

Experience : 3 to 4 years.

Industry : IT Product & Services and IT Consulting.

Employment Type : Full-time.

Work Location : Smart City, Kochi, Kerala.

Shift timing : Based on projects typically day/evening shift.

Role Description :

We are seeking a Security Operations (SecOps) Engineer responsible for maintaining and enhancing the security posture of our on-premise and cloud infrastructure.

This role will focus on OS and middleware patch management, vulnerability scanning and remediation, compliance monitoring, and continuous security automation.

You will work closely with the Cloud, DevOps, and Application teams to ensure all environments - including Linux servers, containers, and AWS workloads - meet our compliance and security standards.

Key Responsibilities :

- Perform OS and middleware security patching across environments (Rocky Linux, RHEL, AL2023, Tomcat, PostgreSQL, EDB, Apache, NodeJS, Java, Docker, etc.

- Execute scheduled vulnerability scans using tools such as AWS Inspector, ECR scanning, Tenable, Nessus/OpenVAS, or Trivy.

- Review and remediate vulnerabilities identified in scan reports; maintain a centralized remediation tracker.

- Manage patch compliance and generate weekly vulnerability and compliance reports (CSV + summary).

- Develop monthly upgrade and mitigation plans for critical CVEs and version upgrades.

- Ensure CIS benchmark compliance and system hardening for EC2 instances, EKS nodes, and on-prem Linux servers.

- Integrate and automate continuous vulnerability monitoring using Jenkins, systemd timers, or AWS Inspector automation.

- Collaborate with teams to improve security observability using AWS Security Hub, GuardDuty, and related services.

- Conduct quarterly reviews for tool optimization and coverage improvement.

- Track and report on vendor security advisories and dependency version updates.

- Contribute to the incident response process by providing vulnerability context and patch validation when required.

Required Skills & Experience :

- 3 - 4 years of experience in Security Operations, DevSecOps, or System Security Engineering.

- Strong hands-on experience with Linux administration (RHEL/Rocky/AL2023).