Role Overview:
As a DevSecOps Engineer at Fynd, you will be responsible for embedding security into the DevOps lifecycle, automating security processes, and ensuring compliance across our cloud-based infrastructure. You will collaborate with cross-functional teams to implement security best practices and proactively mitigate security risks.
What will you do at Fynd
Cloud Security & Infrastructure:
Secure and manage cloud environments in GCP, AWS, and Azure.
Implement best practices for cloud security, IAM, and compliance.
Monitor and optimize cloud workloads for security and efficiency.
Security Automation & DevOps Integration:
Automate security processes using Ansible, Azure DevOps, and other tools.
Integrate security checks into CI/CD pipelines to enable secure deployments.
Conduct vulnerability assessments and harden infrastructure.
Threat Detection & Incident Response:
Deploy and manage IDS/IPS solutions to detect and prevent cyber threats.
Monitor security logs and respond to incidents proactively.
Work with SOC teams to enhance real-time threat detection.
Compliance & Risk Management:
Ensure adherence to industry security standards and compliance frameworks.
Conduct gap assessments and implement remediation plans.
Maintain security documentation and audit readiness.
Collaboration & Continuous Improvement:
Work closely with Engineering, DevOps, and Security teams to drive security initiatives.
Stay updated with emerging security trends and threats.
Advocate for a DevSecOps-first culture within the organisation.
Some more requirements
5 to 7 years of experience in DevSecOps, Cloud Security, or Infrastructure Security.
Solid expertise in GCP, AWS, and Azure security best practices.
Proficiency in Linux administration and security hardening.
Hands-on experience with Ansible, Azure DevOps, and CI/CD pipelines.
Familiarity with security tools like IDS/IPS, SIEM, and vulnerability scanners.
Knowledge of security frameworks (ISO 27001, NIST, CIS, etc.).
Experience with JIRA for task management and tracking.
Solid problem-solving skills and ability to work in a quick-paced environment.
Preferred Qualifications (Nice to Have):
Certifications like AWS Security Specialty, GCP Security Engineer, CISSP, CEH, or CKA.
Experience with IaC security tools (Terraform, CloudFormation).
Knowledge of container security (Docker, Kubernetes).
📌 Devsecops Engineer Mumbai
🏢 Fynd
📍 Mumbai