DevSecOps – Staff Engineer

DevSecOps Staff Engineer

Location: Chennai

Experience: 10+ Years

Employment Type: Full-Time

About the Role

We are looking for a highly experienced DevSecOps Staff Engineer who can seamlessly integrate security into DevOps practices. This role focuses on designing secure CI/CD pipelines, automating cloud infrastructure, and ensuring compliance across development, operations, and security teams. You will play a key role in strengthening cloud security posture while enabling scalable and efficient delivery processes.

Key Responsibilities

• Design, build, and maintain secure CI/CD pipelines aligned with DevSecOps best practices
• Integrate SAST, DAST, SCA, and other security tools into pipelines for automated build, test, secure, and deployment processes
• Implement security controls across cloud platforms (AWS, GCP), including IAM, container security, and data encryption
• Automate vulnerability scanning, monitoring, and compliance checks across deployment pipelines
• Review cloud architectures and implement necessary security enhancements
• Recommend architecture and process improvements for security optimization
• Collaborate with DevOps and development teams to minimize risks and improve release reliability
• Mentor engineers on security best practices and modern DevSecOps methodologies

Required Skills & Qualifications

• Bachelors degree in Computer Science or related field (or equivalent experience)
• 10+ years of industry experience with strong DevSecOps exposure
• AWS Certified Security Specialist certification
• 5+ years of hands-on experience with AWS services (EC2, RDS, ELB, S3, VPC, CloudWatch) focusing on secure cloud solutions
• Experience implementing SAST, DAST, penetration testing, and application security tools
• Strong experience with CI/CD tools such as GitHub Actions, Jenkins, or similar
• Familiarity with OWASP Top 10 security risks and mitigation strategies
• Scripting proficiency in Python, Bash, or similar languages
• Experience with Kubernetes, Docker Swarm, or container orchestration platforms
• Strong understanding of modern security threats and mitigation techniques
• Willingness to work in shifts if required

Good to Have

• AWS Certified DevOps Engineer
• Experience with monitoring tools like CloudWatch, New Relic, etc.
• Familiarity with Infrastructure-as-Code tools (Terraform, Ansible, Chef, Puppet)
• Experience with Windows and Linux system administration