Devsecops Engineer
- Forbes Global
- 5 - 10 years
- Pune
- 5 months ago
- Email to a friend
- Report this job
Job Description
Job Title: DevSecOps Engineer
Employment Type: Full-Time
Experience Required: 3 to 10 years
Job Summary:
We are seeking a skilled and proactive DevSecOps Engineer to integrate security into every stage of the software development and deployment lifecycle. The ideal candidate will have a solid background in DevOps, cloud platforms, automation, and application security. You will be responsible for implementing secure CI/CD pipelines, managing cloud infrastructure, and driving a culture of security-first development across engineering teams.
Key Responsibilities:
- Design, build, and maintain secure CI/CD pipelines for application and infrastructure deployments.
- Integrate security tools and practices into DevOps workflows (e.g., SAST, DAST, SCA, secrets scanning).
- Collaborate with development, operations, and security teams to ensure secure design and delivery.
- Implement and manage Infrastructure as Code (IaC) using tools like Terraform, CloudFormation, or Ansible.
- Harden cloud-native environments (AWS, Azure, GCP) following security best practices.
- Monitor and respond to infrastructure security events and vulnerabilities.
- Automate security controls and enforce policy compliance throughout the SDLC.
- Conduct regular security assessments, audits, and reviews of pipelines and infrastructure.
- Stay current with emerging security threats, vulnerabilities, and DevSecOps tools.
Required Skills & Qualifications:
- Bachelors degree in Computer Science, Engineering, Information Security, or related field.
- 3 to 10 years of hands-on experience in DevOps, with a strong focus on security integration.
- Experience with CI/CD tools such as Jenkins, GitLab CI/CD, CircleCI, or similar.
- Proficiency in scripting languages (e.g., Python, Bash, Shell).
- Solid experience with cloud platforms (AWS, Azure, GCP) and container orchestration (e.g., Kubernetes).
- Strong understanding of application and infrastructure security principles.
- Knowledge of tools like SonarQube, Checkmarx, OWASP ZAP, Snyk, or Aqua Security.
- Familiarity with compliance frameworks (e.g., SOC 2, ISO 27001, HIPAA, PCI-DSS) is a plus.
Preferred Attributes:
- Certifications such as AWS Certified Security, Certified Kubernetes Security Specialist (CKS), or similar.
- Experience with Zero Trust Architecture and Secure Software Development Lifecycle (SSDLC).
- Strong problem-solving and incident response skills.
- Ability to collaborate across diverse technical and non-technical teams.
- Passion for automation, security innovation, and continuous improvement
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: DevSec EngineerEmployement Type: Full timeContact Details:
Company: Forbes GlobalLocation(s): Pune
Keyskills: Threat Modeling Devsecops Secure Code Review Burp Suite Application Security SCR Veracode Sonar Sast Zap Fortify Code Review Appscan Coverity OWASP Black Duck Dast
Similar positions
Forbes Global
Industry -Software Development Company size -10,001+ employees Headquarters - Setagaya-ku, Tokyo Founded 1997 Specialties - E-commerce , Card & Payments, Life & Leisure support services, Communications & Energy & Mobile, Investment, Sports, Digital Contents, Open EC, AD, Affilia...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in