Senior DevSecOps Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Collaborate with R&D to create and sustain secure CI/CD pipelines, spanning from code commit to deployment.

• Incorporate static and dynamic application security testing (SAST/DAST), as well as dependency and container scanning, along with secrets management into the software development lifecycle.

• Strengthen build systems, artifact repositories, and deployment tools against prevalent attack vectors.

• Take ownership of infrastructure-as-code security by reviewing and enhancing the implementation of Terraform, Kubernetes, and cloud configurations.

• Serve as the security liaison for engineering teams, assisting them in resolving issues without causing unnecessary delays.

• Evaluate new tools, services, and architectural choices for security impacts prior to their release.

• Develop automation and guardrails to ensure that secure practices are the easiest route for developers to follow.

• Collaborate with the IT/ITSec Manager and Senior Compliance Analyst to ensure that pipeline and infrastructure modifications align with compliance requirements.

• Provide support for incident response regarding build, deployment, or production infrastructure.

• Assist in establishing and upholding security standards throughout the software development lifecycle.

⛳️ Requirements

• 7-8 years of experience in DevOps, platform engineering, or security engineering, with practical experience in pipelines and infrastructure.

• Proven experience in securing CI/CD pipelines and build systems, rather than merely operating them.

• Solid understanding of cloud infrastructure (AWS, Azure, or GCP) and infrastructure-as-code (Terraform or similar tools).

• Proficient with containers and orchestration technologies (Docker, Kubernetes).

• Familiar with SAST/DAST tools, dependency scanning, and secrets management practices.

• Capable of engaging with engineers on a daily basis and articulating security trade-offs in an understandable manner.

• Knowledge of HIPAA, SOC 2, HITRUST, or GDPR is advantageous, particularly in healthcare or other regulated sectors.

• Experience in a healthcare, fintech, or similarly regulated environment where security and compliance are of utmost importance.

• Relevant certifications such as AWS/Azure/GCP security specialties, CKS, or equivalents are preferred.

• A history of developing custom tooling or automation instead of merely configuring existing products.

• Exceptional communication skills (both written and verbal).

• Ability to work independently.

• Strong critical thinking abilities.

🏝️ Benefits

• Annual Public Holidays as applicable.

• 30 days of total leave per calendar year.

• Mediclaim policy.

• Lifestyle Rewards Program.

• Group Term Life Insurance.

• Gratuity.