Senior DevSecOps Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Incorporate security measures into the software delivery process at ClearDATA.

• Collaborate with R&D to create and sustain secure CI/CD pipelines from code commit to deployment.

• Embed SAST/DAST, dependency and container scanning, along with secrets management into the development lifecycle.

• Strengthen build systems, artifact repositories, and deployment tools against prevalent attack vectors.

• Manage infrastructure-as-code security by reviewing and enhancing Terraform, Kubernetes, and cloud configurations.

• Serve as the security liaison for engineering teams.

• Evaluate new tools, services, and architectural choices for security risks prior to deployment.

• Develop automation and guardrails that facilitate secure practices as the default option.

• Collaborate with the IT/ITSec Manager and Senior Compliance Analyst to ensure pipeline and infrastructure modifications align with compliance requirements.

• Assist in incident response related to build, deployment, or production infrastructure.

• Contribute to establishing and upholding security standards throughout the software development lifecycle.

⛳️ Requirements

• 7-8 years of experience in DevOps, platform engineering, or security engineering, with substantial hands-on experience in pipeline and infrastructure.

• Proven experience in securing CI/CD pipelines and build systems, rather than merely operating them.

• Strong knowledge of cloud infrastructure (AWS, Azure, or GCP) and infrastructure-as-code (Terraform or similar tools).

• Proficient with containers and orchestration technologies (Docker, Kubernetes).

• Familiarity with SAST/DAST tools, dependency scanning, and secrets management.

• Ability to engage directly with engineers on a daily basis and articulate security trade-offs in relatable terms.

• Knowledge of HIPAA, SOC 2, HITRUST, or GDPR is advantageous, especially in healthcare or other regulated domains.

• Experience in a healthcare, fintech, or similarly regulated field where security and compliance are critical.

• Relevant certifications such as AWS/Azure/GCP security specialties, CKS, or similar credentials.

• A history of developing your own tools or automation rather than just configuring existing products.

• Excellent communication skills (both written and verbal).

• Ability to work independently.

• Strong critical thinking skills.

🏝️ Benefits

• Annual public holidays as applicable.

• 30 days of total leave each calendar year.

• Mediclaim policy.

• Lifestyle Rewards Program.

• Group Term Life Insurance.

• Gratuity.