Chief Manager - DevSecOps (Bangalore, Hebbal)

TVS Credit Services Ltd; Bengaluru; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

TVS Credit Services Ltd in Bengaluru seeks a highly experienced DevSecOps leader to drive the organization's DevSecOps transformation, platform engineering, and cloud-native security initiatives. You will architect, implement, and govern secure, scalable, and automated pipelines across the SDLC with expertise in Blue-Green and Canary deployments, Grafana/ELK observability, and IaC automation.

Key responsibilities include designing a scalable DevSecOps framework, integrating security controls

Qualifications

• Experience designing secure SDLC practices and scalable DevSecOps architectures.
• Experience integrating security into CI/CD pipelines.
• Strong knowledge of cloud security in AWS/Azure/GCP.
• Hands-on with IaC tools like Terraform and CloudFormation.

Responsibilities

• Design and implement a scalable, secure DevSecOps framework for SDLC.
• Architect and optimize CI/CD pipelines with integrated security controls.
• Implement Blue-Green and Canary deployments with feature flags.
• Automate security testing (SAST/DAST/IAST) in CI/CD pipelines.
• Design secure IaC using Terraform, CloudFormation, and Ansible.
• Ensure secure cloud deployments across OCI, AWS, Azure, GCP.
• Establish observability with Grafana, ELK, Prometheus, OpenTelemetry.
• Lead risk modeling and threat assessments; drive mitigation.
• Collaborate with engineers, security, and operations; promote security-first culture.
• Oversee incident response processes and governance/compliance controls.
• Mentor teams on secure coding and threat modeling; document architecture.

Skills

DevSecOps leadership

Cloud security

Security architecture

CI/CD security

Threat modelling

Observability

Infrastructure as Code

Automation

Incident management

Collaboration

Education

B.E./B.Tech./M.Tech./MBA/MCA/PG Diploma

Tools

Jenkins

GitLab

CircleCI

Terraform

CloudFormation

Ansible

Grafana

ELK

Prometheus

OpenTelemetry

Docker

Kubernetes

SAST

DAST

IAST

Job description

Job Purpose

We are looking for a highly experienced DevSecOps leader to drive the organization's DevSecOps transformation, platform engineering, and cloud-native security initiatives. This role will be responsible for architecting, implementing, and governing secure, scalable, and automated DevSecOps pipelines and practices across the Software Development Lifecycle (SDLC). Candidate should have deep expertise in modern deployment strategies (Blue-Green, Canary), observability platforms (Grafana, ELK), Infrastructure as Code (IaC) automation, cloud security, CI/CD pipelines, and enterprise-scale DevSecOps practices.

Key Responsibilities

Design and Architecture

Lead the design and implementation of a scalable, secure, and automated DevSecOps framework and strategy. Ensure security practices are integrated throughout the SDLC, from development to production.

CI/CD & Deployment Engineering

Architect, develop, and optimize CI/CD pipelines with integrated security controls. Implement and govern advanced deployment strategies including:

• Blue-Green Deployments
• Canary Deployments
• Rolling Deployments
• Feature Flag-Based Releases

Security Automation

Advocate for and implement automated security testing tools (SAST, DAST, IAST) and integrate them into CI/CD workflows to proactively identify and resolve vulnerabilities.

Infrastructure as Code (IaC) & Automation

Design and implement secure infrastructure-as-code practices using tools like Terraform, CloudFormation, and Ansible. Ensure cloud-native environments (OCI, AWS, Azure, GCP) follow security best practices.

Cloud Security Architecture

Design security solutions for cloud environments, ensuring secure cloud deployments and appropriate access control, encryption, and auditing.

Observability & Reliability Engineering

Establish and enhance observability frameworks using Grafana, ELK, Prometheus, and Open Telemetry to enable proactive monitoring, logging, and alerting. Drive reliability initiatives through incident analysis, performance optimization, and management of SLIs, SLOs, and SLAs.

Risk and Threat Modeling

Lead risk assess and threat modelling exercises to identify potential risks in applications, systems, and infrastructure, ensuring effective mitigation strategies are in place.

Collaboration and Guidance

Collaborate closely with cross-functional teams, including developers, security professionals, and operations staff, to ensure that security is a shared responsibility.

Incident Management

Work with the incident response team to develop and implement processes for rapid identification, containment, and remediation of security incidents.

Governance and Compliance

Ensure that security and compliance requirements (e.g., GDPR, HIPAA, SOC 2) are met through the development and enforcement of secure coding standards, controls, and audit procedures.

Mentorship and Leadership

Provide mentorship and guidance to development and operations teams on secure coding, threat modeling, and security best practices. Promote a security-first culture across the organization.

Documentation and Reporting

Document security architecture, designs, and processes. Provide regular updates and reports to senior management on the state of security posture and risk management.

Qualifications

B.E/B. Tech/M. Tech/MBA/MCA/PG Diploma.

Experience

• At least 10+ years of experience in DevOps, SecOps, or related security-focused roles, with a proven track record of designing and architecting secure systems in a cloud-native environment.
• DevSecOps Expertise: Extensive experience with DevSecOps principles, security tools, and practices integrated into CI/CD pipelines (e.g., Jenkins, GitLab, CircleCI).
• Cloud Security: Deep understanding of cloud security frameworks and services across AWS, Azure, or Google Cloud platforms.
• Infrastructure as Code (IaC): Expertise in infrastructure-as-code tools (Terraform, CloudFormation, Ansible) and how they integrate with secure deployment practices.
• Good experience in Deployment strategies (Ex: Blue-Green, Canary), Observability (Ex: Grafana, ELK), IaC automation.
• Security Tools: Experience with security tools for static analysis (SAST), dynamic analysis (DAST), interactive testing (IAST), and security monitoring. Familiarity with container security (Docker, Kubernetes).