DevSecOps Security Engineer | Pan India | 6-12 years

Job Description

• Design and implement secure automation solutions for development, testing, and production environments.
• Manage and maintain infrastructure security and monitoring systems.
• Develop and maintain CI/CD pipelines across multiple environments.
• Implement and manage SAST and DAST tools to identify and remediate security vulnerabilities in the codebase.
• Conduct regular vulnerability assessments and penetration testing to identify security risks.
• Understand and remediate system vulnerabilities and security issues.
• Collaborate with team members to improve the company's engineering tools, systems, procedures, and data security.
• Create and maintain security-related documentation.
• Stay current with security industry trends, including emerging threats and security solutions.
• Support incident response and problem management teams by providing containment actions and incident analysis.

Primary Skills:

• Security Automation
• CI/CD Pipeline Management
• SAST and DAST
• Vulnerability Management:
• Cloud Security
• Containerization and Orchestration
• Network and Web Security
• Incident Response
• Collaboration and Communication

Secondary Skills:

• Proven work experience as a DevSecOps Engineer or similar role in development, operations, and security.
• Knowledge of cloud technologies and architectures (Azure, AWS, Google Cloud).
• Experience in secure coding practices and automating security testing tools.
• Understanding of network and web-related protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols).
• Proficient with containerization technologies like Docker and orchestration tools like Kubernetes.

Skills (competencies)