strictly NCR only

INTERVIEW FACE TO FACE

NO VIRTUAL - PLEASE APPLY IF YOU ARE AVAILABLE FOR FACE TO FACE

Key Responsibilities
Design, implement, and maintain secure CI/CD pipelines.
Integrate security controls into the software development lifecycle (DevSecOps).
Perform Static Application Security Testing (SAST), Energetic Application Security Testing (DAST), Software Composition Analysis (SCA), and secret scanning.
Conduct vulnerability assessments and coordinate remediation activities.
Implement Infrastructure as Code (IaC) security using Terraform, CloudFormation, or Ansible.
Configure and manage cloud security controls on AWS, Azure, or Google Cloud Platform.
Implement Identity and Access Management (IAM), encryption, secrets management, and key management.
Monitor security events using SIEM, logging, and monitoring solutions.
Automate security compliance and policy enforcement.
Support incident response, forensic analysis, and security investigations.
Ensure compliance with industry standards such as ISO 27001, CIS Benchmarks, NIST, PCI DSS,



or similar frameworks.
Create technical documentation, SOPs, and security guidelines.
Collaborate with cross-functional teams to improve overall security posture.

Required Technical Skills
Linux Administration
Git, GitHub, GitLab, Bitbucket
Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps
Docker and Kubernetes
Terraform, Ansible, CloudFormation
AWS, Microsoft Azure, or Google Cloud Platform
SonarQube, Checkmarx, Semgrep
OWASP ZAP, Burp Suite
Trivy, Clair, Grype
Snyk, OWASP Dependency-Check
Gitleaks, TruffleHog
SIEM tools (Splunk, ELK Stack, Wazuh)
Prometheus and Grafana
Python, Bash, PowerShell scripting

Required Knowledge
DevSecOps practices and SDLC
Secure coding principles
OWASP Top 10
API Security
Identity & Access Management (IAM)
OAuth, SAML, JWT
SSL/TLS, PKI, Cryptography
Network Security
Vulnerability Management
Threat Modeling
Inciden

📌 Devsecops Engineer South Delhi (India)
🏢 IT Monteur
📍 India