Senior DevSecOps Engineer

Job Summary :

Key Responsibilities :

- Integrate security tools (SAST, DAST, SCA, secret scanners, vulnerability scanners) into the development lifecycle.

- Define and enforce code promotion, rollback, and release strategies.

Cloud & Infrastructure Security :

- Implement security group rules, NACLs, and compliance-based access controls.

- Collaborate with cloud architects to enforce governance and policy compliance.

Toolchain & Automation :

- Drive infrastructure-as-code using Terraform, Ansible, and Helm.

- Own and automate tooling such as Jenkins, Docker, Kubernetes, Git, etc.

- Streamline provisioning and configuration management processes.

Container & Orchestration Security :

- Define pod security standards and ensure container hardening practices.

Monitoring, Logging & Incident Response :

- Lead incident response efforts, perform root cause analysis, and implement mitigation strategies.

Collaboration & Governance :

- Ensure alignment with regulatory requirements (ISO 27001, SOC 2, GDPR, etc.).

Required Skills & Technologies :

DevOps/CloudOps :

- Jenkins, Git, Docker, Kubernetes, Helm, Terraform, Ansible

Security :

Cloud Networking :

CI/CD Expertise :

Monitoring & Logging :

Scripting :

Qualifications :

- 3+ years of direct DevSecOps experience (within 7- 10 years total)

- Prior experience in regulated domains like BFSI, Healthcare, or SaaS is highly preferred

- Excellent communication and collaboration skills