DevSecOps Engineer

We are seeking a seasoned Senior DevSecOps Engineer specializing in Kubernetes to join our consulting team based in Bangalore. As a Level 4 professional with 6-9 years of experience, you will play a pivotal role in integrating security throughout the software development lifecycle and CI/CD pipelines.

Description

- Bachelors or Master’s degree in Computer Science, Information Security, or related field.
- 5 - 8 years of experience in DevOps, application security, or software development, with strong knowledge of SDLC and CI/CD processes.
- Proficiency with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, and Azure DevOps.
- Experience with IaC tools like Terraform, Ansible, CloudFormation, and container orchestration platforms such as Kubernetes and OpenShift.
- Familiarity with security tools like SonarQube, Checkmarx, Veracode, Snyk, Aqua, or Prisma Cloud.
- Strong understanding of secure coding practices, OWASP Top 10, and cloud security principles.
- Preferred certifications include Certified DevSecOps Professional, AWS/Azure Security Specialty, CISSP, CSSLP.

Key Responsibilities

- Define and implement DevSecOps best practices, embedding security into every stage of the SDLC.
- Integrate security tools, processes, and automation into CI/CD pipelines.
- Champion a 'shift-left' approach to security in development and deployment workflows.
- Deploy and manage SAST, DAST, SCA, and container scanning tools within CI/CD environments.
- Automate security testing, compliance checks, and vulnerability management.
- Implement Infrastructure as Code (IaC) security scanning and remediation.
- Design secure, automated build and deployment pipelines for multi-cloud and hybrid environments.
- Monitor application and infrastructure security in real time, leveraging SIEM/SOAR integrations.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.