DevSecOps

Job Title: DevSecOps Engineer

Experience: 3-5 Years

Location: Mumbai Andheri East

Employment Type: Full-time

About the Role

We are looking for an experiencedDevSecOps Engineer to enhance our cloud and infrastructure security posture across multiple environments. The ideal candidate will be responsible for integrating security into our DevOps processes, ensuring secure cloud operations, and implementing security best practices across development and deployment workflows.

Key Responsibilities

• Implement and maintain security best practices acrossGCP, AWS, and Azure cloud environments.
• Performinfrastructure and application security hardening on Linux-based systems.
• Design and manageCI/CD pipelines with integrated security checks usingAnsible ,Azure DevOps , and related tools.
• Configure and monitorsecurity tools such asIDS/IPS ,SIEM , andvulnerability scanners .
• Conduct regularvulnerability assessments , patch management, and compliance audits.
• Collaborate with DevOps and Development teams to ensure secure coding and deployment practices.
• Support the adoption ofsecurity frameworks such asISO 27001 ,NIST , andCIS Benchmarks .
• UseJIRA for project tracking, documentation, and task management.
• Troubleshoot complex issues with a focus on root cause analysis and continuous improvement.

Required Skills

• 3-5 years of hands-on experience inDevSecOps ,Cloud Security , orInfrastructure Security .
• Deep understanding ofmulti-cloud security (AWS, GCP, Azure).
• Proficiency inLinux administration and system hardening.
• Strong knowledge ofAnsible ,CI/CD pipelines , andautomation tools .
• Familiarity withSIEM ,IDS/IPS , andvulnerability management tools .
• Working knowledge of security compliance frameworks (ISO 27001, NIST, CIS ).
• Excellent analytical and problem-solving skills with an ability to thrive in a fast-paced environment.
• Should have knowledge of Python Scripting.

Preferred Qualifications (Nice to Have)

• Certifications such asAWS Security Specialty ,GCP Security Engineer ,CISSP ,CEH , orCKA .
• Experience withIaC security tools (Terraform, CloudFormation).
• Understanding ofcontainer and Kubernetes security best practices .