DevSecOps Engineer

We are seeking a seasoned Senior DevSecOps Engineer specializing in Kubernetes to join our consulting team based in Bangalore. As a Level 4 professional with 6-9 years of experience, you will play a pivotal role in integrating security throughout the software development lifecycle and CI/CD pipelines.

Description

• Bachelors or Master’s degree in Computer Science, Information Security, or related field.
• 5 - 8 years of experience in DevOps, application security, or software development, with strong knowledge of SDLC and CI/CD processes.
• Proficiency with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, and Azure DevOps.
• Experience with IaC tools like Terraform, Ansible, CloudFormation, and container orchestration platforms such as Kubernetes and OpenShift.
• Familiarity with security tools like SonarQube, Checkmarx, Veracode, Snyk, Aqua, or Prisma Cloud.
• Strong understanding of secure coding practices, OWASP Top 10, and cloud security principles.
• Preferred certifications include Certified DevSecOps Professional, AWS/Azure Security Specialty, CISSP, CSSLP.

Key Responsibilities

• Define and implement DevSecOps best practices, embedding security into every stage of the SDLC.
• Integrate security tools, processes, and automation into CI/CD pipelines.
• Champion a 'shift-left' approach to security in development and deployment workflows.
• Deploy and manage SAST, DAST, SCA, and container scanning tools within CI/CD environments.
• Automate security testing, compliance checks, and vulnerability management.
• Implement Infrastructure as Code (IaC) security scanning and remediation.
• Design secure, automated build and deployment pipelines for multi-cloud and hybrid environments.
• Monitor application and infrastructure security in real time, leveraging SIEM/SOAR integrations.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.