Key Responsibilities:
Design security processes, controls, and governance approaches that scale across private, hybrid, and multi-cloud settings
Development and implementation of comprehensive cloud, container, and application security strategies with a solid emphasis on DevSecOps principles
Configure and deploy cloud resources, cloud topologies, landing zones in infrastructure-as-code (IaC) formats
Strategize and design automated enforcement mechanisms for cloud security governance, including policy-as-code, preventative CSP guardrails, resource tagging, CI/CD pipeline gates, and CNAPP-enabled response playbooks
Configure custom policy and control frameworks within CNAPP technologies to adhere to industry standard and apply consistent compliance measurement across cloud environments
Instrument in-line security scanning technologies into CI/CD workflows to enable secure software delivery, inclusive of IaC scanning, image scanning, secrets scanning, code scanning, dynamic interface scanning, and dependency scanning platforms
Instrument agent-based security technologies onto application, container, serverless, and cloud workloads to enable runtime protection, logging, vulnerability scanning, and EDR functions




Harden software supply chains and infrastructure through configuration management workflows, software integrity mechanisms (e.g., code/image signing), segregation of duties, network settings, and access controls
Perform data-driven security posture or forensic assessments of cloud environments and critical applications through configuration, code, permission, and log reviews
Develop cloud-native or pipeline-triggered workflows to enable access provisioning, SecOps alerting, infrastructure remediation, and incident response procedures
Integrate cloud and pipeline logging mechanisms with SIEM/SOAR platforms and design detection use cases to enable mature logging and monitoring programs
Proven experience in cloud security management, with a robust focus on DevSecOps.
In-depth knowledge of cloud platforms such as AWS, Azure, or Google Cloud, and their security features.
Experience with security tools and technologies such as SIEM, WAFs, IAM, SAST/DAST, and container security.
Familiarity with DevOps tools and practices including Jenkins, Docker, Kubernetes, and Terraform.

📌 Devsecops Engineer Bengaluru (India)
🏢 PwC
📍 India