Candidates with relevant skill-set can apply using below link:-

https://r.ripplehire.com/s/cZI2h

Job Summary:

We are seeking a highly skilled DevSecOps Senior Engineer to join our dynamic team as a Process Lead. The ideal candidate will play a pivotal role in integrating security practices within the DevOps process, ensuring that security is embedded throughout the software development lifecycle. This position requires a strong understanding of both development and operations, with a focus on automating security processes and enhancing the overall security posture of our applications.

Responsibilities:

- Lead the implementation of DevSecOps practices across various projects, ensuring security is a fundamental component of the development process.
- Collaborate with development, operations, and security teams to design and implement secure CI/CD pipelines.
- Conduct security assessments and vulnerability scans, and provide actionable insights to development teams.
- Automate security testing and compliance checks within the CI/CD pipeline.
- Develop and maintain security policies, standards, and guidelines to ensure compliance with industry regulations.
- Provide training and support to development teams on secure coding practices and security tools.
- Monitor and respond to security incidents, ensuring timely resolution and reporting.
- Stay updated on the latest security trends, threats,



and technologies to continuously improve security practices.

Mandatory Skills:

- Robust expertise in DevOps practices and tools, including CI/CD, containerization, and orchestration.
- Proficient in security tools and technologies, such as static and dynamic application security testing (SAST/DAST), vulnerability management, and security information and event management (SIEM).
- Experience with cloud platforms (AWS, Azure, GCP) and their security features.
- Solid understanding of application security principles and best practices.
- Familiarity with scripting and automation tools (e.g., Python, Bash, Ansible).
- Excellent problem-solving skills and the ability to work under pressure.

Preferred Skills:

- Experience with infrastructure as code (IaC) tools such as Terraform or CloudFormation.
- Knowledge of compliance frameworks (e.g., GDPR, PCI-DSS, ISO 27001).
- Familiarity with Agile methodologies and project management tools.
- Certifications in security (e.g., CISSP, CISM, CEH) or DevOps (e.g., AWS Certified DevOps Engineer).

Qualifications:

- Bachelor's degree in Computer Science, Information Technology, or a related field.
- Strong analytical and communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
- Proven ability to work collaboratively in a team-oriented environment.

📌 Devsecops Engineer (Pune)
🏢 Mphasis
📍 Pune