Cloud Security & DevSecOps Engineer

Cehpoint; India; Remote; INR 750,000 - 1,500,000; Full time

Benefits offered by this job

Full remote work setup with cloud lab

Sponsorship for cloud security certs

Job summary

Cehpoint is seeking a DevSecOps professional to protect our cloud perimeter, automate secure deployment pipelines, and implement zero-trust across servers. You will harden Linux hosts, configure Nginx with strong TLS, and lead vulnerability scanning in CI/CD. Remote work setup offered with cloud lab credits.

Ideal candidates have hands-on Docker security, Terraform IAM practices, and GitHub Actions expertise to maintain resilient, compliant infrastructure during traffic spikes and DR drills.

Qualifications

• Thorough Linux administration and secure system configuration.
• In-depth cloud networking (VPCs, subnets, security groups).
• Experience with infrastructure-as-code and IAM least privilege.
• Hands-on Docker security, container isolation, and image slimming.
• CI/CD automation with GitHub Actions.

Responsibilities

• Design and maintain secure CI/CD pipelines with automated SAST, DAST, and dependency scanning.
• Harden Linux servers (Ubuntu/Debian), SSH policies, iptables/UFW firewalls, and fail2ban rules.
• Manage and optimize Nginx reverse proxies with CSP, HSTS, and rate-limiting configurations.
• Perform regular automated vulnerability scanning and remediation across cloud instances.
• Respond to security events and coordinate disaster recovery drills.

Skills

Linux administration

Cloud networking

IAM least privilege

Bash scripting

GitHub Actions

Docker security

Tools

Docker

Nginx

Terraform

GitHub Actions

Let’s Encrypt

Job description

You will protect our cloud perimeter, build secure automated deployment pipelines, and ensure zero-trust security across all server fleets.

DevSecOps Docker Security Linux Hardening CI/CD Pipelines (GitHub Actions) AWS / OCI Cloud Nginx & TLS Terraform Vulnerability Scanning

Section 02

• Design and maintain secure CI/CD pipelines with automated SAST, DAST, and dependency scanning.
• Harden Linux servers (Ubuntu/Debian), SSH policies, iptables/UFW firewalls, and fail2ban rules.
• Manage and optimize Nginx reverse proxies with strict CSP, HSTS, and rate-limiting configurations.
• Perform regular automated vulnerability scanning and remediation across cloud instances.
• Respond to security events and coordinate disaster recovery drills.

Section 03

Mandatory Foundational Knowledge

• Thorough understanding of Linux system administration, process isolation, and file permissions.
• Deep knowledge of cloud networking: VPCs, subnets, security groups, NAT gateways, and DNS.
• Principles of infrastructure-as-code, secrets management, and least-privilege IAM.

Section 04

Mandatory Practical Skills & Architecture

• Hands-on experience configuring Docker container isolation and image slimming.
• Expertise in shell scripting (Bash) and CI/CD automation (GitHub Actions).
• Proficiency in configuring and debugging Nginx, SSL/TLS certificates (Let’s Encrypt), and PM2.

Section 05

Problem Solving, Execution Rigor & Curiosity

• Proactive mindset that fixes security misconfigurations before they can be probed.
• Pride in resilient infrastructure that stays online during traffic spikes.

Section 06 Practical evaluation benchmark

5-day live technical evaluation milestone

5-Day DevSecOps Milestone: Audit a multi-container deployment, harden the Linux host and Nginx configuration, and implement automated vulnerability scanning in a CI pipeline (strictly 5 working days). Verification unlocks immediate official offer letter.

Institutional hiring protocol: candidates who clear resume screening take a live practical milestone of strictly 5 working days. Verifiable completion and code audit by your assigned engineering mentor is the sole prerequisite for the official offer letter.

Section 07

Compensation, Total Rewards & Advancement

• Annual package ₹7,50,000–₹13,50,000 with annual performance appraisals.
• Full remote work setup with cloud lab credits.
• Sponsorship for cloud security certifications (AWS Certified Security, CKA).

Dedicated inbox for this role

Questions, private repository links or portfolio references for this opening route straight to the engineering leads reviewing it.

₹8,00,000 – ₹15,00,000 / year + Performance Bonuses