Our partner is looking for a Senior DevSecOps Engineer based in India. The Senior DevSecOps Engineer will play a critical role in integrating security into software development and deployment processes, ensuring that security is embedded throughout the engineering lifecycle rather than treated as a final checkpoint. You will design and maintain secure CI/CD pipelines, strengthen build environments, and implement automated security controls across cloud infrastructure and application delivery workflows. Working closely with research and development (R&D;), IT security, and compliance teams, you will help engineers identify and resolve vulnerabilities without compromising delivery speed. You will also oversee infrastructure-as-code security, container protection, and automated testing practices to improve the organization's overall security posture. This remote opportunity is ideal for an experienced technical professional who combines hands-on DevOps expertise with a robust security mindset. You will contribute to secure, reliable, and compliant technology operations within a highly regulated healthcare environment. Design, implement, maintain, and continuously improve secure CI/CD pipelines, embedding security controls throughout the software development lifecycle, from code commits to production deployment. - Automated Security Testing: Integrate and manage static application security testing (SAST), dynamic application security testing (DAST), dependency scanning, container scanning, and secrets management tools to detect and address vulnerabilities early. - Build and Deployment Security: Harden build systems, artifact repositories, deployment tooling,



and related infrastructure against common attack vectors, ensuring the integrity and security of software delivery processes. - Infrastructure-as-Code Security: Review and improve infrastructure-as-code configurations, including Terraform, Kubernetes, and cloud resources, to enforce secure configuration standards and reduce infrastructure risks. - Cloud and Container Security: Strengthen security controls across cloud environments and containerized workloads, applying best practices to Docker, Kubernetes, and relevant cloud-native services. - Serve as a security partner to R&D; teams, helping developers understand vulnerabilities, prioritize remediation, and make informed security decisions without unnecessarily slowing development. - Architecture and Tool Assessment: Evaluate new tools, services, and technical architecture decisions for security implications, recommending appropriate safeguards before implementation or release. - Compliance Alignment: Collaborate with IT security and compliance stakeholders to ensure that pipeline configurations, infrastructure changes, and software delivery practices align with applicable regulatory and security requirements. - Assist with investigating and responding to security incidents involving build systems, deployment pipelines, cloud infrastructure, and production environments. - Establish, maintain, and communicate secure software development lifecycle standards, technical guidelines, and engineering best practices across teams. Requirements - Professional Experience: Approximately 7–8 years of experience in DevOps, platform engineering, or security engineering, with substantial hands-on experience in infrastructure management and software delivery pipelines.

📌 Senior DevSecOps Engineer (fully Remote) (India)
🏢 Jobgether
📍 India