DevSecOps Security Engineer

We are seeking a skilled DevSecOps Security Engineer to join our team in Chennai, India. As a DevSecOps Security Engineer, you will play a critical role in ensuring that every step of the software development lifecycle follows security best practices.

Responsibilities

• Drive the implementation of security testing, including Secrets Scanning, SAST, DAST, SCA, IAC, Container Scanning, and AI Security.
• Assist teams in triaging and addressing application security vulnerabilities.
• Support integration of security tools into CI/CD pipelines using Tekton, Cloud Build, GitHub actions, etc.
• Define and publish security requirements from a DevSecOps perspective.
• Prioritize vulnerabilities discovered and recommend remediation timelines.
• Collaborate with cross-functional teams to ensure security best practices are followed throughout the software development lifecycle.
• Monitor and analyze vulnerability trends to identify focused actions like training, bulk fixes, etc.
• Stay up-to-date with the latest security trends and technologies to continuously improve security processes.
• Provide security training and guidance to development teams on secure coding practices and security awareness.

Qualifications

• Bachelor's degree in a relevant field (Computer Science, Cybersecurity, Software Engineering, or others) or an equivalent combination of education, training, and experience.
• Minimum of 3 years of professional experience with any combination of at least 2 technical disciplines, including application security, cloud security, vulnerability management, secure development methodologies, identity management.
• Preferred - Cybersecurity/DevSecOps certifications.
• Willingness to work in flexible timings to support global customers/collaboration.

Skillset Required

• Experience in security testing (SCA, SAST, DAST, Container Scanning, IaC, etc.) and their integration into CI/CD.
• Provide technical expertise in fixing vulnerabilities (e.g., knowledge of OWASP Top 10).
• Excellent communication skills (written and verbal) with the ability to articulate complex topics clearly and concisely.
• Experience in integrating, monitoring, and improving DevSecOps tools and processes, automating routine tasks, and improving system reliability.
• Experience in writing scripts in languages such as Golang, Shell Script, Python, YAML, etc.
• Experience in DevOps-related tools, pipelines, platforms, registries, and version control systems.
• Power-user of AI tools to boost productivity and quality of DevSecOps processes.
• Basic understanding of network and web-related protocols (such as TCP/IP, UDP, HTTP, HTTPS, protocols).
• Good knowledge of Agile processes (planning/standups/retros, etc.) and interaction with cross-functional teams.