Senior DevSecOps Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Collaborate with DevOps teams to design, implement, and sustain secure CI/CD pipelines that incorporate security testing at each phase of the software development lifecycle.

• Implement automated security scanning methods such as SAST, DAST, SCA, and container scanning.

• Deploy and maintain API Security tools.

• Ensure that tools consistently report to the aggregator.

• Work alongside development teams to encourage secure coding practices and offer security guidance throughout the development process.

• Ensure adherence to industry standards pertinent to the travel sector, including PCI-DSS, GDPR, and SOC 2.

• Mentor junior engineers and foster a security-first culture within engineering teams.

⛳️ Requirements

• Over 5 years of professional software development experience with proven proficiency in at least one major programming language (such as Python, Go, Java, JavaScript/TypeScript, or similar).

• More than 3 years of practical experience in DevSecOps or Security Engineering.

• Strong understanding of OWASP.

• Expertise in cloud security, particularly with at least one major cloud service provider (AWS, Azure, or GCP).

• In-depth knowledge of API Security and related security tools (like Salt, Akamai, Cloudflare, or similar).

• Comprehensive understanding of cloud-native security including IAM, network security, encryption, secrets management, and compliance frameworks.

• Proficient with CI/CD tools (such as Jenkins, GitLab CI, GitHub Actions, CircleCI, or similar).

• Familiarity with Infrastructure as Code tools (like Terraform, CloudFormation, Ansible, or similar).

🏝️ Benefits

• Health and welfare insurance plans.

• Retirement programs.

• Parental leave.

• Adoption assistance.

• Wellbeing resources.