Company Description Codians.ai is a technology platform focused on IT outsourcing, talent hiring, and transparent reviews of IT companies and professionals. The company connects businesses with vetted IT experts across disciplines such as development, design, consulting, and other services, emphasizing reliability and quality delivery.

Through detailed profiles, genuine reviews, and ratings, Codians.ai helps organizations make informed decisions when selecting technology partners. Its user-friendly interface streamlines the process of finding and hiring top IT talent, supporting both businesses in scaling projects and professionals in showcasing expertise and building reputations.

Key Responsibilities :-

Lead the design and implementation of GitLab CI security stages covering SAST, DAST, SCA, and vulnerability scanning

Define and oversee the integration of SonarQube, OWASP ZAP, Trivy, Syft, and Grype into build and deployment pipelines

Drive software supply chain security, including SBOM generation and Cosign image signing

Set Kubernetes security standards using Kyverno, OPA/Gatekeeper, and Kubernetes RBAC

Own cloud security on AWS across IAM, KMS, Secrets Manager, Inspector, Security Hub, GuardDuty, CloudTrail, CloudWatch Logs, and ACM

Oversee secrets and certificate management, including HashiCorp Vault





Lead Linux and Docker hardening initiatives

Lead SIEM monitoring, VAPT coordination, and security remediation tracking through to closure

Ensure alignment with OWASP Top 10, ISO 27001 controls, and DPDP requirements

Partner with development, DevOps, infrastructure, and compliance teams to build secure-by-default practices

Mentor and guide security and DevOps engineers, and report security posture to stakeholders

Required Skills -

Application security: SAST, DAST, SCA, vulnerability scanning, OWASP Top 10

CI/CD security: GitLab CI security stages

Security tools: Trivy, SonarQube, OWASP ZAP, Syft, Grype, Cosign

Kubernetes and containers: Kyverno, OPA/Gatekeeper, Docker security, Kubernetes RBAC

AWS security: IAM, KMS, Secrets Manager, Inspector, Security Hub, GuardDuty, CloudTrail, CloudWatch Logs, ACM

Secrets and certificates: Vault, certificate management

Systems: Linux hardening

Governance and operations: IAM, ISO 27001 controls, DPDP awareness, SIEM monitoring, VAPT coordination, security remediation tracking

Certifications -

- AWS Certified Security – Specialty, AWS Solutions Architect Associate, or an equivalent cloud certification
- CKS or KCSA
- CEH

📌 Security Lead (DevSecOps, AWS & Kubernetes Security) (Delhi)
🏢 Codians.ai
📍 Delhi