Job Description
Dev SecOps/Secure Dev Ops Engineer
About the Role:
We are hiring a hands-on Secure Dev Ops Engineer to build and secure AWS environments, automate deployments, and own CI/CD, infrastructure as code, containerized workloads, monitoring, and vulnerability remediation across development, UAT, and production. You'll integrate security into delivery pipelines, independently troubleshoot issues, and drive remediation to closure.
Location: Kolkata

Key Responsibilities
• Build and manage secure AWS infrastructure using EC2, VPC, IAM, S3, RDS, ECR/EKS, ALB, Route 53, Cloud Watch, KMS, and related services.
• Design and maintain CI/CD pipelines using Jenkins, Git Lab CI, Git Hub Actions, or equivalent.
• Manage controlled deployments across Dev/UAT/Production, including configuration management, rollback, and release support.
• Implement Terraform-based Infrastructure as Code with secure state management and version-controlled changes.
• Secure AWS environments using least-privilege IAM, network controls, encryption, secrets management, logging, WAF, Cloud Trail, Guard Duty, and Security Hub.
• Manage Docker and Kubernetes/EKS workloads, including image security, RBAC, secrets, and workload access.
• Integrate SAST, DAST, SCA, secrets scanning, IaC scanning, and container vulnerability scanning into CI/CD pipelines.
• Identify, prioritize, remediate, retest, and close Critical/High vulnerabilities and VAPT findings.
• Monitor application infrastructure, troubleshoot deployment/infrastructure incidents, and improve availability and observability.
• Review existing environments for configuration drift, excessive access, exposed services, insecure credentials, manual deployment risks, and monitoring gaps.
• Manage Linux administration, DNS/SSL, backup/recovery, and incident troubleshooting across environments.
• Support VAPT, security reviews, ISO 27001/SOC 2 evidence, technical questionnaires, and client audits.
Requirements• 4-6 years of hands-on Dev SecOps experience.
• Strong practical AWS infrastructure and security experience.
• Hands-on Terraform/Infrastructure-as-Code experience.




• Strong CI/CD and deployment automation experience.
• Hands-on Docker and Kubernetes/EKS experience (practical working knowledge; deep platform engineering only where EKS is a core production dependency).
• Working knowledge of SAST, DAST, SCA, secrets, IaC, and container scanning.
• Experience with Sonar Qube, Trivy, OWASP ZAP, or equivalent tools.
• Good Linux administration and Bash/Python scripting skills.
• Git/Git Lab or equivalent source-control experience.
• Strong troubleshooting, incident handling, vulnerability remediation, deployment rollback, secrets handling, and communication skills
Positive to Have
• Azure security exposure such as Defender for Cloud, Entra ID/Azure AD, and Key Vault.
• ISO 27001, SOC 2, or similar compliance exposure.
• AWS, Kubernetes, Terraform, or Security certifications.
• Experience with backup/restore, disaster recovery, and cost optimization.
Requirements
Dev SecOps/Secure Dev Ops Engineer About the Role: We are hiring a hands-on Secure Dev Ops Engineer to build and secure AWS environments, automate deployments, and own CI/CD, infrastructure as code, containerized workloads, monitoring, and vulnerability remediation across development, UAT, and production. You'll integrate security into delivery pipelines, independently troubleshoot issues, and drive remediation to closure. Location: Kolkata Key Responsibilities • Build and manage secure AWS infrastructure using EC2, VPC, IAM, S3, RDS, ECR/EKS, ALB, Route 53, Cloud Watch, KMS, and related services. • Design and maintain CI/CD pipelines using Jenkins, Git Lab CI, Git Hub Actions, or equivalent. • Manage controlled deployments across Dev/UAT/Production, including configuration management, rollback, and release support.



• Implement Terraform-based Infrastructure as Code with secure state management and version-controlled changes. • Secure AWS environments using least-privilege IAM, network controls, encryption, secrets management, logging, WAF, Cloud Trail, Guard Duty, and Security Hub. • Manage Docker and Kubernetes/EKS workloads, including image security, RBAC, secrets, and workload access. • Integrate SAST, DAST, SCA, secrets scanning, IaC scanning, and container vulnerability scanning into CI/CD pipelines. • Identify, prioritize, remediate, retest, and close Critical/High vulnerabilities and VAPT findings. • Monitor application infrastructure, troubleshoot deployment/infrastructure incidents, and improve availability and observability. • Review existing environments for configuration drift, excessive access, exposed services, insecure credentials, manual deployment risks, and monitoring gaps. • Manage Linux administration, DNS/SSL, backup/recovery, and incident troubleshooting across environments. • Support VAPT, security reviews, ISO 27001/SOC 2 evidence, technical questionnaires, and client audits. Requirements • 4-6 years of hands-on Dev SecOps experience. • Strong practical AWS infrastructure and security experience. • Hands-on Terraform/Infrastructure-as-Code experience. • Strong CI/CD and deployment automation experience. • Hands-on Docker and Kubernetes/EKS experience (practical working knowledge; deep platform engineering only where EKS is a core production dependency). • Working knowledge of SAST, DAST, SCA, secrets, IaC, and container scanning. • Experience with Sonar Qube, Trivy, OWASP ZAP, or equivalent tools. • Good Linux administration and Bash/Python scripting skills. • Git/Git Lab or equivalent source-control experience. • Strong troubleshooting, incident handling, vulnerability remediation, deployment rollback, secrets handling, and communication skills Good to Have • Azure security exposure such as Defender for Cloud, Entra ID/Azure AD, and Key Vault. • ISO 27001, SOC 2, or similar compliance exposure. • AWS, Kubernetes, Terraform, or Security certifications. • Experience with backup/restore, disaster recovery, and cost optimization.

📌 DevSecOps/Secure DevOps Engineer (Kolkata) (India)
🏢 2COMs
📍 India