DevSecOps Specialist | Jobs In India

Company Overview

Job Summary

Key Responsibilities

• Integrate automated security testing into CI/CD pipelines and development workflows.
• Conduct threat modeling, risk assessments, architecture reviews, code reviews, vulnerability assessments, and security evaluations.
• Assess and harden AWS, Azure, and GCP environments, including Docker and Kubernetes containers.
• Review configurations against security and compliance requirements and recommend vulnerability remediation.
• Support security audits, gap assessments, compliance reviews, and secure development practices.

Required Technical Skills

• Have 3+ years of hands-on experience in DevSecOps, application security, or security engineering.
• Use security tools such as Snyk, SonarQube, Checkmarx, Trivy, ZAP, or Semgrep in CI/CD pipelines.
• Have experience with GitHub Actions, GitLab CI, or Jenkins.
• Understand OWASP, secure coding, SAST, DAST, SCA, IAST, and container scanning.
• Understand network security, IAM, cryptography, endpoint security, incident response, and cloud-native security.
• Have experience with Terraform or CloudFormation and containerized environments.

Compliance and Qualifications

• Be familiar with ISO 27001, NIST, CIS Benchmarks, SOC 2, PCI-DSS, and OWASP Top 10.
• Have experience with security reviews, gap analyses, compliance assessments, and vulnerability remediation.
• Any graduate with relevant information security, cybersecurity, DevSecOps, or security engineering experience may be considered.
• A related degree and certifications such as CISSP, CISA, CEH, GWAPT, OSWE, or CSSLP are advantageous.
• AI experience and formal managerial experience are not mandatory for this individual contributor role.

Preferred Skills

• Experience with Cycode is an advantage.
• Scripting or programming in Python, Bash, Go, or JavaScript is preferred.
• The role requires communication of security risks to technical and business stakeholders.

Work Mode and Locations

• The job summary describes the opportunity as remote.
• The posting lists onsite, hybrid, and remote work modes and multiple possible Indian locations, including Ahmedabad, Bangalore, Delhi, Gurgaon, Hyderabad, Noida, Pune, and Mumbai.

Operational Experience