Senior Cloud Security & DevSecOps Engineer

About Position:

We are seeking a highly skilled Senior We are looking for a highly skilled Cloud Security & DevSecOps Engineer to strengthen the security posture of cloud-native and hybrid environments. The ideal candidate will have extensive experience in AWS Cloud Security, DevSecOps practices, vulnerability management, identity and access management, and security automation. This role will be responsible for integrating security across the software development lifecycle, ensuring compliance, managing cloud risks, and driving secure-by-design principles across products and platforms.

• Role: Senior Cloud Security & DevSecOps Engineer
• Location: All Persistent Locations
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Design and implement AWS cloud security controls for cloud-native and hybrid environments.
• Establish and enforce cloud security best practices, standards, and governance frameworks.
• Secure cloud workloads, applications, data, and infrastructure using AWS-native security services.
• Implement encryption, key management, and access control mechanisms to protect critical assets.
• Integrate security controls into CI/CD pipelines and DevSecOps workflows.
• Automate security testing, vulnerability scanning, code analysis, and compliance validation.
• Implement security guardrails and policy enforcement across cloud deployments.
• Collaborate with DevOps teams to build secure and scalable deployment pipelines.
• Manage AWS IAM, Cognito, KMS, Security Groups, and PKI infrastructure.
• Implement least-privilege access models and role-based access controls.
• Secure authentication, authorization, and identity lifecycle management processes.
• Monitor and improve access governance across cloud environments.
• Conduct Threat and Risk Assessments (TRA) for applications, infrastructure, and cloud workloads.
• Identify security risks and recommend mitigation strategies.
• Perform secure architecture reviews and threat modeling exercises.
• Ensure adherence to security standards and compliance requirements.
• Analyze vulnerability assessment and scanning reports.
• Coordinate remediation efforts with development and operations teams.
• Conduct secure code reviews, security testing, and product security assessments.
• Promote secure coding practices and security awareness across engineering teams.
• Ensure compliance with OWASP, CIS Benchmarks, and secure development standards.
• Monitor cloud security events and investigate potential threats.
• Utilize AWS CloudTrail, GuardDuty, Security Hub, and SIEM solutions for continuous monitoring.
• Support incident response, root cause analysis, and remediation activities.
• Implement security monitoring and alerting frameworks to improve threat detection capabilities.
• Work closely with development, QA, DevOps, and infrastructure teams to embed security throughout the SDLC.
• Participate in security governance reviews and compliance assessments.
• Drive security best practices and continuous improvement initiatives.
• Stay updated with evolving cloud security threats, technologies, and industry standards.

Expertise You'll Bring:

• 8 to 12 years of experience in Cloud Security, Cyber Security, DevSecOps, or related security domains.
• Strong experience with AWS Cloud Security services and architectures.
• Hands-on expertise in DevSecOps, CI/CD security, and security automation.
• Experience managing IAM, Cognito, KMS, PKI, Security Groups, and access governance.
• Strong understanding of Threat & Risk Assessments (TRA) and security controls.
• Experience in vulnerability management, remediation, and security testing.
• Knowledge of cloud security monitoring, logging, and incident response processes.
• Proficiency with security tools, SIEM platforms, and vulnerability scanning solutions.
• Strong understanding of secure software development lifecycle (SSDLC) practices.
• Excellent analytical, troubleshooting, and problem-solving skills.

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."