Devsecops Engineer

Dear Candidate,

we Have openings for Devsecops developer for Bangalore / Hyderabad / Pune Location.

Note: immediate joiner.

Job Decsription.

Key Responsibilities

• Implement and enhance DevSecOps practices across application development and delivery processes.
• Integrate security controls into CI/CD pipelines to enable automated security validation and compliance checks.
• Configure and manage application security tools including SAST, DAST, SCA, code quality, vulnerability scanning, and test automation platforms.
• Implement shift-left security practices by embedding security controls throughout the SDLC.
• Configure security policies, quality gates, scanning rules, dashboards, reports, and workflow automation.
• Support integration of DevSecOps tools with source code repositories, CI/CD platforms, artifact repositories, and deployment automation tools.
• Perform security assessments, vulnerability analysis, and remediation support for applications and infrastructure.
• Support secure software supply chain practices, including artifact validation, dependency scanning, and build security controls.
• Assist teams with DevSecOps adoption, automation improvements, and security process optimization.
• Troubleshoot CI/CD pipeline issues, security tooling issues, and integration challenges.
• Develop technical documentation, configuration guides, operational procedures, and knowledge transfer materials.
• Collaborate with application teams, cybersecurity teams, cloud teams, and engineering teams to improve security posture.
• Support compliance and governance requirements aligned with frameworks such as ISO 27001, NIST, CIS Benchmarks, OWASP, PCI-DSS, and SOC 2.
• DevSecOps Platform Responsibilities
• SonarQube: Configure and transition code quality capabilities, including projects, quality profiles, quality gates, rules, dashboards, permissions, and CI/CD pipeline integrations.
• Checkmarx: Configure and transition SAST capabilities, including application onboarding, scan policies, security rules, user access, reporting dashboards, and CI/CD integrations.
• Invicti: Configure and transition DAST capabilities, including application targets, scan profiles, authentication settings, vulnerability workflows, reporting, and automation integrations.
• Coverity: Configure and transition static code analysis capabilities, including projects, analysis settings, defect workflows, reporting, user access, and build pipeline integrations.
• IrisRisk: Configure and transition application risk management capabilities, including risk assessment workflows, security processes, user roles, reporting, and governance integrations.
• Ranorex: Configure and transition test automation capabilities, including test suites, execution environments, reporting, and CI/CD automation integrations.
• Black Duck SCA / BDBA: Configure and transition software composition analysis capabilities, including projects, scanning policies, vulnerability reporting, security rules, user access, and CI/CD integrations.
• AssetPanda: Configure and transition asset management capabilities, including asset workflows, inventory structures, custom fields, user roles, permissions, integrations, and reporting.
• DevSecOps & CI/CD Integration Experience
• Experience integrating DevSecOps platforms with:
• GitHub Enterprise
• GitHub Actions
• Azure DevOps
• GitLab Enterprise
• Jenkins
• Argo CD Enterprise
• JFrog Artifactory

Experience should include

• Integrating SAST, DAST, SCA, and code quality tools into CI/CD pipelines.
• Configuring automated security scans, compliance checks, and quality gates.
• Managing pipeline integrations, service connections, credentials, tokens, and API integrations.
• Supporting secure build, test, and deployment automation.
• Troubleshooting CI/CD pipeline failures related to security tooling and integrations.
• Required Skills & Experience
• Required Experience
• 7+ years of experience in DevOps, DevSecOps, application security, or software engineering roles.
• 3+ years of hands-on experience implementing DevSecOps practices and security automation.
• Experience supporting enterprise DevSecOps transformations, platform transitions, or modernization initiatives.
• Strong understanding of Secure Software Development Lifecycle (SSDLC) and DevSecOps principles.
• Experience integrating security tools into CI/CD pipelines and development workflows.
• Experience implementing automated security controls, vulnerability management processes, and compliance requirements.
• Experience working with development, security, infrastructure, and operations teams.

Best Regards,

jyothi