Job Title: DevOps / Observability Engineer (CI/CD & SecOps)

Location: Bengaluru/ Pune

Experience: 8+yrs

Job Summary

DevSecOps Engineer skill set

Must-have (non negotiables)

- CI/CD engineering: Strong hands-on with pipelines (e.g., Jenkins / GitLab CI / Azure DevOps), build/release patterns, artefact versioning, promotion strategies.
- Cloud + container platform: Solid experience with Kubernetes and Docker, plus at least one major cloud (AWS/Azure/GCP) including IAM concepts.
- Infrastructure as Code (IaC): Terraform (preferred) and/or CloudFormation/Bicep; ability to build reusable modules and manage state safely.
- Security in the SDLC: Practical implementation of SAST, SCA, DAST, secrets scanning, container image scanning; ability to set quality/security gates in pipelines.
- Vulnerability management: Triage findings, prioritise by risk, drive remediation with dev teams, and track to closure.
- Observability & operations: Logging/metrics/tracing basics; incident support; familiarity with tools like Splunk/ELK, Prometheus/Grafana, OpenTelemetry.
- Scripting & automation: Bash + Python (or equivalent) to automate repetitive tasks and integrate tools.
- Secure configuration & hardening: Baselines for OS/container/K8s; RBAC, network policies, least privilege.
- Source control & collaboration: Git workflows, code reviews, branching strategies,



and working in agile delivery teams.
- Communication & influence: Can coach developers, write explicit runbooks, and drive adoption without being the security police .
- Payments Background, basic understanding of the payments flows

Good-to-have (differentiators)

- Policy-as-code: OPA/Gatekeeper, Kyverno; automated compliance controls.
- Threat modelling & secure design: STRIDE-style thinking; secure architecture reviews.
- Secrets management: HashiCorp Vault / cloud-native secrets; rotation patterns.
- Advanced K8s security: Pod Security Standards, admission controllers, service mesh security (mTLS), runtime security (Falco).
- Supply chain security: SBOMs (CycloneDX/SPDX), provenance (SLSA), signing (Cosign), dependency pinning.
- Platform engineering: Internal developer platform patterns, golden paths, reusable templates.
- Regulated environment experience: Evidence collection, audit support, control mapping (without turning everything into paperwork).
- Certifications (optional): CKAD/CKA, Security+, AZ-500/AWS Security, Terraform Associate.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Devsec Ops Engineer (Bengaluru)
🏢 CAPCO
📍 Bengaluru