DevSecOps Specialist

About Company:

HCLTech is a global leader in technology solutions, renowned for its innovation, customer-centric approach, and commitment to excellence. With a presence in over 50 countries and a workforce of more than 220,000 professionals, HCLTech delivers cutting-edge services across IT, engineering, and digital transformation. The company is dedicated to driving progress, fostering diversity, and building sustainable solutions for clients worldwide, consistently earning industry accolades for its pioneering advancements and ethical standards.

OVERVIEW OF THE ROLE

The DevSecOps Engineer will play a critical role in enhancing the security posture of HCLTech’s applications and infrastructure. This position is responsible for integrating robust security controls throughout the software development lifecycle, ensuring that both cloud and on-premise solutions meet the highest security standards. The role is pivotal in safeguarding HCLTech’s digital assets and supporting the company’s mission to deliver secure, innovative technology solutions to global clients.

DETAILED RESPONSIBILITIES

• Develop, implement, and maintain DevSecOps processes to ensure secure code delivery and infrastructure protection.

• Conduct Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify and remediate vulnerabilities.

• Manage and prioritize vulnerability findings, collaborating with development and operations teams to resolve security issues.

• Integrate security controls and automated checks into Azure DevOps pipelines, streamlining secure software delivery.

• Utilize Python and Linux Shell scripting to automate security processes and enhance operational efficiency.

• Apply best practices in Application Security and Infrastructure Security across multiple environments.

• Monitor, report, and respond to security threats, ensuring compliance with industry standards and corporate policies.

• Stay current with emerging security trends, tools, and technologies, proactively recommending improvements.

SKILL REQUIREMENTS

• Extensive experience in DevSecOps, Application Security, or Infrastructure Security.

• Strong proficiency in Python and Linux Shell scripting.

• Hands-on expertise in SAST, DAST, and Vulnerability Management.

• Thorough understanding of Application Security and Infrastructure Security principles.

• Proven experience integrating security controls into Azure DevOps pipelines.

• Bachelor’s degree in Computer Science, Information Security, or related field; relevant certifications (e.g., CISSP, CEH, Azure Security Engineer) are advantageous.

OTHER REQUIREMENTS (OPTIONAL)

• Knowledge of AI Security, including LLM security risks and secure AI application development.

• Experience securing Kubernetes, containers, and Infrastructure as Code (Terraform preferred).

• Familiarity with cloud security, especially Microsoft Azure.

• Proficiency with container and cloud security tools.

• Experience using Ansible scripts for automation.

CAREER DEVELOPMENT OPPORTUNITIES

HCLTech offers a dynamic environment with ample opportunities for professional growth. Employees benefit from tailored training programs, certifications, and mentorship initiatives designed to advance technical and leadership skills. The company encourages internal mobility, enabling talented professionals to explore diverse roles across global projects. As part of HCLTech’s commitment to employee development, you’ll have access to industry-leading resources, continuous learning platforms, and a supportive culture that empowers you to reach your full potential and contribute meaningfully to the organization’s success.