Lead Engineer - DevSecops [T500-27076]

About FM: FM is a 190-year-old, Fortune 500 commercial property insurance company of 6,000+ employees with a unique focus on science and risk engineering. Serving over a quarter of the Fortune 500 and major corporations globally, they deliver data-driven strategies that enhance resilience, ensure business continuity, and empower organizations to thrive. FM India located in Bengaluru is a strategic location for driving FM's global operational efficiency that allows them to leverage the country’s talented workforce and advance their capabilities to serve their clients better.

Role Title: Lead Software Engineer Job Responsibilities:

Analysis & Design:

• Analyses impact of requirements and works with Solution Architects on software solutions. Must consider usability, extensibility, efficiency, and performance during all phases of development. Applies design patterns to build secure, maintainable, testable, and evolvable software to ensure coherence across applications. Participates in designing software solutions and prepares technical documentation taking into consideration the Enterprise Architecture including authoritative sources of data, data & systems integration, and interrelationships across multiple subject areas (including transformation rules). Participates and leads design reviews. Contributes to the product backlogs. Assists in scheduling backlog items in the optimal execution order and ensures that the backlog is comprehensive. Advocates adoption of Enterprise initiatives. Helps develop business relationships and integrate activities with other IT departments as appropriate to ensure successful implementation and support efforts.

Development:

• Estimation: Develops & facilitates technical estimates and timeframes without having complete information and provides confidence level in estimate. Mentors others in good estimation techniques

.

• Coding: Mentors developers in the design and construction of complex business applications and prepares technical specifications to develop software solutions. Leads by example adoption of FM Global best practices, architectural principles, and security standards. Leads the evolution and improvement of these standards and practices. Develops software to transform and migrate data across environments. Actively participates in peer code reviews and is responsible for code quality.
• Test Automation: Responsible for writing pre-deployment automated tests for any delivered code. Participates in testing and debugging of overall system as required. Reviews automated test code to ensure appropriate test coverage. Demonstrates ability to setup and monitor automated tests in the CICD pipeline. Makes decisions regarding where to focus and improve the efficiency, coverage, and stability of automated tests. Participates in coding and maintenance of post deployment test automation frameworks.
• Support: Supports and plans effort to implement application in production and support post-production. Ensures development work includes detailed, high-quality documentation at appropriate level to allow for maintenance and support. Plans and executes reduction of technical debt and mitigates risks associated with upgrades

Research:

• Participates in continuous improvement through experimentation to stay abreast of the changing technological landscape and clearly articulates and presents value to the product organization. Engages in delivery of applicable enterprise initiatives. Actively participates within learning forums and contributes to setting forum objectives. Deeply understands the technology/business landscape.

Leadership:

• Encourages team member contribution within design and implementation efforts within product teams. Serve as a role model in delivery accountability, process, and mindset. Demonstrates and continuously broadens technical capabilities and domain knowledge where individual could serve effectively on a variety of product teams. Enables successful outcomes on teams by proactively identifying and raising transparency of impediments. Mentors junior team members. Fosters teamwork and excellent communication among team members. Provides meaningful feedback.

Skill and Experience:

• 5+ years of experience required to perform essential job functions.
• Additional Experience Qualifier (optional): 7+ years of application development experience with large scale business applications in a fastpaced iterative development environment.
• 5+ years designing, developing, and implementing business applications from business concept through production.
• Object-oriented design, development, and implementation of business applications in current computing architectures.
• Working knowledge of relevant technologies: front end tools, middleware, Databases, ORMs, development frameworks, design patterns, API design, Test Automation, DevOps, Cloud Architecture, and Enterprise Integration Patterns.
• Ability to demonstrate skills in solving complex problems within and across teams.
• Strong analytical skills required. Ability to develop accurate estimates for complex solutions and brings transparency to the estimation process.
• Demonstrates drive to align estimates to meet organizational goals.
• Strong interpersonal skills are required. Strong work ethic and ability to demonstrate personal accountability for successful product delivery.
• Strong verbal and written communication skills with an ability to translate technical concepts to the appropriate level of the audience.
• Ability to work self-directed as part of a cross-functional team and shows commitment to the product and team.
• Instils a sense of urgency in the team and focuses the team on efficient delivery.
• Ability to present technical concepts is desired.

Must Have Skills:

• Defining agentic data and communication architecture/policy, owning security posture around agentic communication/data systems, Secure CI/CD architecture and automation - Design and evolve CI/CD pipelines (GitHub Actions, Azure DevOps) with secure-by-default patterns, reusable templates, gated approvals, and promotion strategies across environments.
• Cloud and container platform mastery with security controls - Strong hands-on with AWS, Azure, or GCP plus Kubernetes and container tooling, including policy enforcement, workload identity, secrets management, and secure networking.
• DevSecOps security tooling integration and orchestration - Implement and tune SAST, SCA, DAST, scanning, container scanning, secret scanning, and SBOM workflows, then integrate results into developer workflows (PR checks, build gates, dashboards) with low false positives.
• AI assisted DevSecOps enablement - Build or integrate AI capabilities such as: intelligent triage of findings, auto-prioritization based on exploitability and blast radius, suggested remediations, secure code review assistance, and developer copilots for pipeline authoring.
• Telemetry, observability, and security signal engineering - Define logging, metrics, traces, and security event pipelines across build and runtime, build dashboards and alerts, and connect findings to incident response and post-incident learning.

Threat modeling and secure engineering leadership:

• Lead threat modeling and secure design reviews, translate risk into engineering requirements, and coach teams on secure coding patterns, least privilege, dependency hygiene, and release risk decisions.

Engineering leadership and platform product mindset:

• Operate like a platform lead: roadmaps, internal customer empathy, documentation, service ownership, SLAs, adoption metrics, and driving standardization across teams without slowing delivery.

Must Have Skills:

• Azure Devops *CI/CD Pipelines *Kubernetes *DevSecOps security tooling integration and orchestration * C# or Python

Education and Certifications:

• 4 Year / bachelor’s degree required

Work location: Bengaluru