Dear Candidate,

we Have openings for Devsecops developer for Bangalore / Hyderabad / Pune Location.

Note: immediate joiner.

Job Decsription.

Key Responsibilities

- Implement and enhance DevSecOps practices across application development and delivery processes.
- Integrate security controls into CI/CD pipelines to enable automated security validation and compliance checks.
- Configure and manage application security tools including SAST, DAST, SCA, code quality, vulnerability scanning, and test automation platforms.
- Implement shift-left security practices by embedding security controls throughout the SDLC.
- Configure security policies, quality gates, scanning rules, dashboards, reports, and workflow automation.
- Support integration of DevSecOps tools with source code repositories, CI/CD platforms, artifact repositories, and deployment automation tools.
- Perform security assessments, vulnerability analysis, and remediation support for applications and infrastructure.
- Support secure software supply chain practices, including artifact validation, dependency scanning, and build security controls.
- Assist teams with DevSecOps adoption, automation improvements, and security process optimization.
- Troubleshoot CI/CD pipeline issues, security tooling issues, and integration challenges.
- Develop technical documentation, configuration guides, operational procedures, and knowledge transfer materials.
- Collaborate with application teams, cybersecurity teams, cloud teams, and engineering teams to improve security posture.
- Support compliance and governance requirements aligned with frameworks such as ISO 27001, NIST, CIS Benchmarks, OWASP, PCI-DSS, and SOC 2.
- DevSecOps Platform Responsibilities




- SonarQube: Configure and transition code quality capabilities, including projects, quality profiles, quality gates, rules, dashboards, permissions, and CI/CD pipeline integrations.
- Checkmarx: Configure and transition SAST capabilities, including application onboarding, scan policies, security rules, user access, reporting dashboards, and CI/CD integrations.
- Invicti: Configure and transition DAST capabilities, including application targets, scan profiles, authentication settings, vulnerability workflows, reporting, and automation integrations.
- Coverity: Configure and transition static code analysis capabilities, including projects, analysis settings, defect workflows, reporting, user access, and build pipeline integrations.
- IrisRisk: Configure and transition application risk management capabilities, including risk assessment workflows, security processes, user roles, reporting, and governance integrations.
- Ranorex: Configure and transition test automation capabilities, including test suites, execution environments, reporting, and CI/CD automation integrations.
- Black Duck SCA / BDBA: Configure and transition software composition analysis capabilities, including projects, scanning policies, vulnerability reporting, security rules, user access, and CI/CD integrations.




- AssetPanda: Configure and transition asset management capabilities, including asset workflows, inventory structures, custom fields, user roles, permissions, integrations, and reporting.
- DevSecOps & CI/CD Integration Experience
- Experience integrating DevSecOps platforms with:
- GitHub Enterprise
- GitHub Actions
- Azure DevOps
- GitLab Enterprise
- Jenkins
- Argo CD Enterprise
- JFrog Artifactory

Experience should include

- Integrating SAST, DAST, SCA, and code quality tools into CI/CD pipelines.
- Configuring automated security scans, compliance checks, and quality gates.
- Managing pipeline integrations, service connections, credentials, tokens, and API integrations.
- Supporting secure build, test, and deployment automation.
- Troubleshooting CI/CD pipeline failures related to security tooling and integrations.
- Required Skills & Experience
- Required Experience
- 7+ years of experience in DevOps, DevSecOps, application security, or software engineering roles.
- 3+ years of hands-on experience implementing DevSecOps practices and security automation.
- Experience supporting enterprise DevSecOps transformations, platform transitions, or modernization initiatives.
- Robust understanding of Secure Software Development Lifecycle (SSDLC) and DevSecOps principles.
- Experience integrating security tools into CI/CD pipelines and development workflows.
- Experience implementing automated security controls, vulnerability management processes, and compliance requirements.
- Experience working with development, security, infrastructure, and operations teams.

Best Regards, jyothi

📌 Devsecops Engineer (Bengaluru)
🏢 adroitent
📍 Bengaluru