Job description

Job Title: DevSecOps Engineer

Department: Technology

Location: Poloroche Business Avenue, Viman Nagar, Pune

Experience: 2+ years

Reporting To: Senior Principal SRE and Head of Engineering

Role Overview

The DevSecOps Engineer - will be responsible for the secure design, automation, and compliance of cloud-native infrastructure across AWS and Kubernetes environments. This role focuses on embedding security controls within AWS workloads and CI/CD pipelines to ensure continuous compliance with organizational and regulatory standards.

Key Responsibilities

● Deploy, secure, and manage Kubernetes environments in alignment with CIS and NIST controls.

● Implement AWS security best practices for IAM, networking, storage, encryption, and logging.

● Integrate security validation stages into CI/CD pipelines, ensuring vulnerability scanning and compliance checks are automated.

● Utilize AWS Config, AWS Organizations, Security Hub, GuardDuty, and CloudTrail to maintain continuous visibility and governance over workloads.

● Author and enforce security policies, RBAC configurations, and least-privilege access models.

● Automate governance tasks such as tagging enforcement, configuration remediation, and compliance reporting using Lambda or Step Functions.

● Support compliance audits by providing configuration evidence and remediation reports.

● Collaborate with cross-functional teams to ensure adherence to ISO 27001 and SOC2 security - compliance standards throughout the development lifecycle.

● Conduct internal security training sessions for development and engineering teams across the organization.

Required Qualifications and Skills

● Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.

● 2+ years of experience in DevSecOps, Cloud Security, or Infrastructure Automation.

● Proficiency in at least one CI/CD tool, such as CircleCI, Argo Project, GitHub Actions, or similar, is essential.

● Exposure of Kubernetes operations, security configurations, and policy enforcement.

● Hands-on experience with AWS services including IAM, EC2, S3, VPC, Lambda, Organizations, Secrets Manager, Security Hub, CloudTrail, CloudWatch, EventBridge, Security Hub, Route 53, CloudFront, and ECR.

● Experience integrating automated security tools like SonarQube, OWASP ZAP, Synk, into CI/CD pipelines for proactive vulnerability management.

● Understanding of the OWASP Top 10 vulnerabilities and secure coding practices.

● Working knowledge of security and compliance frameworks including ISO 27001 and SOC2, and the ability to implement controls supporting these standards across cloud environments.

Good to Have

● Understanding of OIDC, SSO, and identity federation between Kubernetes and AWS.

● Exposure to Kubernetes Admission Controllers, OPA/Gatekeeper, or Kyverno for policy enforcement.

● Experience with centralized secrets management tools such as AWS Secrets Manager.

● Contribution to open-source DevSecOps tools, community projects, or speaking engagements at security conferences.

● Relevant AWS or Kubernetes certifications

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.