About us:
Build the future of banking.

Zetais a next-generation banking technology company providing cloud-native, fully stackable processing and core banking platforms for issuers. With a focus on scalability, compliance, and innovation, Zeta empowers financial institutions to modernize their technology infrastructure and deliver secure, seamless digital banking experiences.

Our impact runs at real-world scale. Today,over 25 million cards are live on Zeta-powered platforms across 7 countries, supported by a passionate team of 1,700+ Zetanautsacross India, the US, EMEA, and Asia. Backed bySoftBank Vision Fund, Mastercard, and other reputed strategic investors, we reached a valuation of$2 billionin ****.

Our focus is on establishing product lines that focus on key outcomes by addressing real customer pain points, modernizing legacy systems, and strengthening core fundamentals. As a result, our systems and platforms support a wide range of banking and payments capabilities, including:
1.Tachyon, our cloud-native banking stack built for population-scale systems
2.Cipher, our unified authentication platform for secure, high-volume banking environments
3.Digital Credit as a Service, enabling banks to launch credit lines on UPI
4.Elena, our intelligent and conversational AI platform for banking
5.Pixel, India's first digital-native credit card, launched in partnership withHDFC Bank, for whom we also revamped theirPayZappmobile app: Winner of theCelent Model Bank Award for Payments Innovation ****
6.Sparrow, the leading card experience for non-prime cardholders in the US
...and more across cards, payments, lending, and core banking.

We are an engineering-first organization that values ownership, bias for action, and long-term thinking. Together, we solve some of the hardest problems in banking tech. Our culture is built around trust, collaboration, and creating the conditions for you to drive impact proportionate to your potential. Reinforcing our commitment to creating an inclusive and supportive workplace, we have been consistently recognized as aGreat Place to Work.

If you want to build cutting-edge banking tech that enables banks to serve millions reliably, securely, and at a population scale, Zeta is your playground.
If you would like to learn more about how we have grown and evolved over the years,watch our journey here. You can also exploreour websiteand follow us onLinkedIn,Instagram,YouTube, andX.

About the Role:
As a Cloud Security & DevSecOps Engineer II, you will play a key role in strengthening the security posture of our cloud infrastructure, Kubernetes/container platforms and software delivery ecosystem.
You will work closely with Cloud/Platform, SRE, DevOps, Engineering, Product Security and Risk & Compliance teams to identify and mitigate security risks, build scalable security controls, automate recurring security activities and drive security findings through remediation and closure.
The role covers Cloud Security Posture Management (CSPM), IAM & Access Governance, DevSecOps, Kubernetes Security, Infrastructure Security, Vulnerability Management, Security Monitoring, Security Automation and Compliance Engineering, while also contributing to broader Information Security initiatives across the organisation.
Responsibilities

Perform continuous security posture assessments acrossAWS,



Azure and GCPenvironments and identify cloud misconfigurations, insecure configurations and deviations from security baselines.

ConductIAM and SSO access reviews, covering users, roles, groups, service accounts/service principals, permissions, access keys and privileged access, and identify excessive or stale access.

Identify and assesspublicly exposed cloud resources, insecure network configurations and unnecessary external exposure across compute, storage, databases, load balancers and other cloud services.

Integrate security controls intoCI/CD pipelines, including SAST, SCA, secrets scanning, Infrastructure-as-Code scanning, container/image scanning, DAST and software supply-chain controls.

PerformInfrastructure-as-Code security reviewsand support secure implementation of Terraform and similar technologies.

PerformKubernetes and container security assessments, including cluster configurations, Kubernetes RBAC, workload security, image security, hardening and security posture management.

Analyse vulnerabilities and security findings, validate risks and false positives, prioritise remediation and work with Engineering/SRE/DevOps teams to drive findings through closure.

Develop security automation usingPython, Bash, cloud APIs and CLIsfor IAM reviews, asset inventories, security assessments, compliance checks, monitoring, reporting and evidence collection.

Review cloud network and edge security controls includingVPC/VNet, Security Groups/firewalls, load balancers, WAF, TLS/mTLS and public/private connectivity.

Monitor and reviewCloudSEK alerts and findings, perform initial analysis and validation, and coordinate remediation or escalation with relevant stakeholders.

SupportCloudSEK block-rule activities, including review and validation of relevant indicators, domains and URLs, and coordinate appropriate blocking actions with responsible teams.

Support investigation of cloud and security alerts, exposed credentials, suspicious access, provider security notifications and other security events.

Participate incloud architecture and design security reviewsand provide practical security recommendations based on risk, secure-by-design and least-privilege principles.

Support security and audit requirements aligned with frameworks such asCIS, NIST, PCI DSS, ISO ***** and OWASP.

Develop and maintain security standards, SOPs, hardening guidelines, assessment methodologies, technical documentation and operational runbooks.

Continuously identify opportunities toautomate preventive and detective security controlsand improve overall Cloud Security and DevSecOps maturity.

Participate inbroader Information Security activitiesincluding vulnerability management, security assessments, incident investigations, security reviews, audit/compliance.
Skills

To be successful in this role, you should have:
Strong hands-on understanding of at least one major public cloud platform, preferablyAWS,



with working knowledge ofAzure and/or GCPbeing an advantage.

Good understanding of cloud security acrossIAM, compute, storage, networking, encryption, logging and monitoring.

Knowledge of cloud security services such asAWS IAM/IAM Identity Center, Security Hub, AWS Config, CloudTrail, KMS and EKS, or equivalent services in Azure/GCP.

Hands-on understanding ofCI/CD and DevSecOps security, including SAST, SCA, DAST, secrets scanning, IaC scanning and container/image security.

Experience with CI/CD technologies such asJenkins, GitHub Actions, ArgoCD, Bitbucket Pipelines or equivalent platforms.

Working knowledge ofTerraform and Infrastructure-as-Code security.

Good understanding ofDocker, Kubernetes, Kubernetes RBAC, container security and cluster hardening.

Experience with scripting and automation usingPython, Bash or similar languages.

Strong understanding ofIAM, least privilege, MFA, privileged access, credential management and access governance.

Understanding ofCSPM, KSPM, CWPP and CNAPPconcepts.

Knowledge of cloud/network security concepts includingVPC/VNet, Security Groups, firewalls, WAF, TLS/mTLS and private/public connectivity.

Experience withsecurity monitoring, alert triage and threat/exposure-management platforms such as CloudSEK or equivalent solutions.

Exposure to security tooling such asSnyk or equivalent SAST/SCA, CSPM, container and infrastructure security solutions.

Understanding of vulnerability management, risk-based remediation and security incident investigation.

Knowledge of security standards and frameworks includingCIS Benchmarks, NIST, PCI DSS, ISO ***** and OWASP.

Ability to independently analyse security findings, document security risks and provide clear and practical remediation recommendations to technical stakeholders.
Experience and Qualifications

3–6 years of relevant experiencein Cloud Security, DevSecOps, Infrastructure Security, Platform Security or related security engineering roles.

Strong hands-on technical experience incloud security, infrastructure security, vulnerability management and security automation.

Bachelor's degree inComputer Science, Information Technology, Cyber Security, Engineering or a related discipline, or equivalent relevant industry experience.

Relevant cloud/security certifications such asAWS Certified Security – Specialty, AWS Solutions Architect, Certified Kubernetes Security Specialist (CKS), Microsoft Azure Security Engineer, Google Professional Cloud Security Engineer or equivalentare an added advantage.
Equal Opportunity

Zeta is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive setting for all employees. We encourage applicants from all backgrounds, cultures, and communities to apply and believe that a diverse workforce is key to our success
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

📌 Devsecops Engineer Ii (Mumbai)
🏢 Zeta
📍 Mumbai