DevSecOps Engineer

Role: DevSecOps Engineer with Cloud Security · Kubernetes Security · Pipeline Security

Location: Hyderabad/Chennai/Bangalore

Shift timings: 2pm to 11pm

Required Qualifications

• 7+ years of experience in DevSecOps, Cloud Security, Platform Security, or Security Engineering .
• Hands-on experience securing AWS and Google Cloud Platform (GCP) environments.
• Strong expertise in Cloud Security Posture Management (CSPM) , IAM, least-privilege access controls, and security governance.
• Extensive experience with Kubernetes Security , preferably GKE , including:
• Pod Security Standards
• RBAC
• Network Policies
• Admission Controllers
• Cluster Hardening (CIS Benchmarks)
• Experience implementing and managing runtime security tools such as Falco .
• Strong knowledge of Istio Security including mTLS and authorization policies.
• Hands-on experience securing GitLab CI/CD pipelines.
• Experience integrating security controls such as:
• SAST
• DAST
• Dependency Scanning
• Secret Detection
• Container Scanning (Trivy/Snyk)
• Experience with Infrastructure as Code (Terraform) and security tools such as Checkov and tfsec .
• Knowledge of container security and software supply chain security.
• Experience with Secrets Management using AWS Secrets Manager and/or GCP Secret Manager.
• Understanding of network security concepts including:
• WAF
• Cloud Armor
• TLS Certificate Management
• DNS Security
• VPNs and Private Endpoints
• Experience supporting compliance frameworks such as:
• SOC 2
• HIPAA
• ISO 27001
• Experience in cloud and Kubernetes security incident response and vulnerability management.
• Familiarity with security monitoring and observability tools such as Datadog .
• Strong scripting/automation skills using Python, Bash, or similar languages .
• Excellent stakeholder management, threat modeling, and security review experience.

Nice-to-Have Qualifications

• Security certifications such as:
• CISSP
• CCSP
• AWS Security Specialty
• Google Professional Cloud Security Engineer
• CKA/CKS
• Experience building organization-wide security policy-as-code frameworks.
• Experience in highly regulated environments (Healthcare, FinTech, SaaS).