Key Responsibilities

- DevSecOps Integration: Integrate security practices, testing, and reviews into all stages of the software development lifecycle.

- CI/CD Security Automation: Implement and maintain security scanning tools, including SAST, DAST, Software Composition Analysis (SCA), and secrets scanning, within CI/CD pipelines.

- Vulnerability Management: Conduct vulnerability assessments, threat modeling, and security testing. Identify, prioritize, and remediate vulnerabilities in production systems handling real user data.

- AWS Security: Secure AWS infrastructure by implementing and managing IAM policies, Security Groups, AWS KMS, Secrets Manager, and other relevant security controls.

- Infrastructure as Code Security: Implement security best practices for infrastructure provisioned using Terraform or AWS CloudFormation.

- Container Security: Secure containerized applications and orchestration environments using Docker and Kubernetes.

- Security Monitoring and Incident Response: Implement monitoring and observability solutions using tools such as ELK Stack, Grafana, and SIEM platforms to detect, investigate, and respond to security incidents.

- Compliance and Governance: Drive the implementation and successful completion of security compliance initiatives, including ISO 27001, SOC 2, or PCI-DSS.

- Security Collaboration: Collaborate with engineering and infrastructure teams to promote secure coding practices, mitigate emerging threats, and improve the organization's security posture.

- AI-Driven Security: Leverage AI/ML-based security tools and techniques for threat detection, anomaly identification, and risk assessment.

Mandatory Skills and Qualifications

- 5+ years of relevant experience in DevSecOps, DevOps with a strong security focus,



or a related cybersecurity engineering role.

- Production Security: Proven hands-on experience identifying and fixing security vulnerabilities in live production systems handling real user data.

- AWS Security: Practical experience implementing and managing AWS IAM, Security Groups, KMS, and Secrets Manager.

- CI/CD Pipeline Security: Hands-on experience integrating and managing security scanning tools within CI/CD pipelines, rather than only building deployment pipelines.

- Security Compliance: Direct involvement in successfully implementing and preparing an organization for ISO 27001, SOC 2, or PCI-DSS compliance.

- High-Scale Systems: Experience supporting systems handling at least 5,000 concurrent requests.

- Real-Time and Asynchronous Systems: Experience securing or operating real-time applications, event-driven architectures, or asynchronous processing systems.

- CI/CD Tools: Experience with Jenkins, GitLab CI, or GitHub Actions.

- Scripting and Automation: Proficiency in Python, Bash, Shell, or Go.

- Infrastructure and Containers: Hands-on experience with Terraform or CloudFormation, Docker, and Kubernetes.

- Security Tools: Familiarity with tools such as SonarQube, Snyk, OWASP ZAP, HashiCorp Vault, or equivalent security scanning and secrets management solutions.

- AI/ML Security Tools: Experience using AI/ML-based tools for security monitoring, threat detection, or risk analysis.

Preferred Qualifications

- Experience building security automation frameworks and integrating security checks into developer workflows.

- Experience with cloud security monitoring, incident response, and vulnerability remediation at scale.

- Solid problem-solving, communication, and cross-functional collaboration skills.

📌 Senior Devops Engineer (Bengaluru)
🏢 Nxtwave Disruptive Technologies (Hiring for a client)
📍 Bengaluru