Devsecops Engineer

Role & responsibilities

• Own and drive hardened base image evaluation and rollout activities, including POC planning, technical validation, and migration support for engineering teams.
• Analyze existing Dockerfiles and container build workflows, then adapt them to hardened or minimal image models, including multi-stage builds, shell-less images, non-root runtime patterns, package dependencies, and custom module handling.
• Partner with engineering teams to onboard representative services and validate hardened images against real application requirements such as NGINX, Go/protoc builds, Java runtime images, Ubuntu-derived workloads, and package-specific constraints.
• Support container registry integration patterns, including GCP Artifact Registry mirroring, pull-through cache models, self-hosted registries, scheduled synchronization.
• Help integrate security tooling into CI/CD workflows to improve vulnerability visibility, image hygiene, SBOM adoption, signing/verification practices, and continuous remediation.
• Coordinate with vendors and internal stakeholders during POCs, technical troubleshooting, architecture reviews, pricing/licensing inputs, support escalations, and rollout planning.
• Contribute to vulnerability management and CNAPP-related initiatives by supporting cloud security tooling, including Wiz-related workflows and integration considerations.
• Collaborate with Compliance/GRC stakeholders to ensure engineering controls and integrations can support SOC2, GovRAMP, Vanta evidence collection, and audit-readiness needs.
• Document technical patterns, migration guidance, implementation decisions, known limitations, and support procedures for engineering adoption.
• Provide practical technical support across global teams, with the ability to collaborate effectively with APAC/India-based engineering resources

Perks and benefits

- Hybrid and Complete remote option

- Health Insurance