Client is looking for a DevSecOps Engineer to lead the operational management of our TruffleHog platform. You will be the primary guardian against "secret leakage," ensuring that sensitive credentials such as API keys, private keys, and hardcoded passwords are detected and remediated across our global development pipeline. You will manage the infrastructure, tune the scanning engines, and partner with development teams to ensure secure software delivery.
Key Responsibilities
1. TruffleHog Platform & Infrastructure Management
- Uptime & Health: Monitor the TruffleHog platform uptime; conduct regular infrastructure health checks and manage scheduled maintenance with proactive stakeholder communication.
- Global Upgrades: Plan and execute scanner version upgrades across all global regions to ensure the latest detection patterns are active.
- Troubleshooting: Resolve network connectivity issues and basic infrastructure bottlenecks to minimize scan failures and ensure 24/7 service availability.
- Resilience:
Maintain the scanner infrastructure in strict alignment with Client's Disaster Recovery (DR) and Business Continuity Planning (BCP) policies.
2. Secret Discovery & Risk Management
- Secret Inventory: Conduct automated and manual discovery scans to establish and maintain a centralized Secret Risk Register and inventory.
- Policy Alignment: Partner with CTO-GPSE stakeholders to define secret discovery rules and remediation guidelines that align with enterprise security standards.
- Integration: Support Client's developers during the deployment and configuration of TruffleHog components into their CI/CD pipelines and data source integrations.
3. Incident Response & Event Management
- Triage: Analyze generated alerts to distinguish between true positives and false positives.
- Remediation Management: Manage the remediation lifecycle based on defined SLAs, validating that "secrets" are properly rotated or revoked rather than just hidden.
- User Support:
📌 DevSecOps Engineer (Mumbai)
🏢 Meta Infotech
📍 Mumbai
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.