DevSecOps

Role Overview

We are seeking an experienced DevSecOps Engineer | 6yrs | Mumbai to strengthen security practices across the CI/CD pipeline and development lifecycle. The ideal candidate will have strong hands-on experience with CI/CD tools, code repositories, and security scanning platforms to ensure secure and efficient software delivery.

About Us

CodeVyasa is a mid-sized product engineering company that works with top-tier product and solutions organizations such as McKinsey, Walmart, RazorPay, Swiggy, and others. We are a team of 550+ engineers, driving innovation across Product & Data Engineering, focusing on Agentic AI, RPA, Full Stack, and GenAI-based solutions

Key Responsibilities

• Implement and manage DevSecOps practices across the software development lifecycle.
• Design and maintain CI/CD pipelines using Jenkins.
• Manage and maintain code repositories using Bitbucket.
• Integrate security scanning tools such as SonarQube and Snyk into CI/CD pipelines.
• Identify and remediate code vulnerabilities and security risks during development.
• Collaborate with development, DevOps, and security teams to enforce secure coding standards.
• Automate security checks and ensure compliance with security best practices.
• Monitor and improve pipeline performance and security posture.

Required Skills

• Strong experience in DevSecOps practices and implementation.
• Hands-on experience with Jenkins for CI/CD pipeline management.
• Experience with Bitbucket for source code management.
• Hands-on experience with SonarQube for code quality and security analysis.
• Experience using Snyk for vulnerability and dependency scanning.
• Good understanding of application security and secure development practices.

Good to Have

• Experience with container security and Kubernetes environments.
• Familiarity with cloud platforms (AWS, Azure, or GCP).
• Knowledge of automation and scripting (Python/Shell).