Cloud Security Operations Specialist - DevSecOps

BOT Consulting; Jaipur; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

BOT Consulting is seeking a highly skilled DevSecOps Engineer to enhance our cloud security. You will design and implement security controls, monitor incidents, and ensure best practices across our cloud environments.

The ideal candidate has a strong background in cloud security and relevant certifications, along with excellent problem-solving and communication skills. Join us in protecting our infrastructure and applications while staying current with emerging security threats.

Qualifications

• 5+ years of proven experience as a DevSecOps Engineer or similar role.
• Hands-on experience with cloud security tools and technologies.
• Strong understanding of cloud computing concepts and AWS architectures.

Responsibilities

• Design and implement security controls for cloud infrastructure.
• Monitor and respond to security incidents.
• Conduct regular security assessments and audits.

Skills

Cloud security expertise

Infrastructure-as-code (IaC)

Python programming

Security assessments and audits

Cloud security tools

Education

Bachelor's degree in Computer Science or related field

Relevant certifications (AWS Certified Security Specialty, etc.)

Tools

Terraform

AWS Security services

Web Application Firewalls

Job description

Overview

We are seeking a highly skilled and experienced DevSecOps Engineer to join our team. As a DevSecOps Engineer, you will be responsible for designing, implementing, and maintaining security measures to protect our cloud-based infrastructure and applications. You will work closely with our development and operations teams to ensure that security best practices are followed throughout the cloud environment. You will also be responsible for monitoring and responding to security incidents and conducting regular security audits and assessments. The ideal candidate has a strong background in cloud security, a deep understanding of cloud architectures, and a passion for staying up to date with the latest security threats and trends.

Shift

EMEA with flexibility on NA hours.

Key Responsibilities

• Design and implement security controls and measures to protect cloud-based infrastructure and applications.
• Collaborate with development and operations teams to integrate security into the software development lifecycle.
• Regular security assessments and audits should be conducted to identify vulnerabilities and recommend remediation actions.
• Monitor and respond to security incidents and conduct investigations as necessary.
• Stay current with emerging cloud security threats, vulnerabilities, and industry best practices.
• Develop and maintain security policies, procedures, and documentation.
• Perform security reviews of cloud service providers and third-party vendors.
• Provide guidance and support to internal teams on best practices for cloud security.
• Conduct cloud security awareness advisories with 5+ years of proven experience working as a DevSecOps Engineer or in a similar role.
• Bachelor's degree in Computer Science, Information Technology, or a related field.
• At least one of the relevant certifications (e.g., AWS Certified Security Specialty, AWS Certified Network Specialty, AWS Solutions Architect Professional, CCSP, CISSP). Additional certifications are a plus.
• Strong understanding of cloud computing concepts and AWS architectures. GCP is a plus.
• In-depth knowledge of cloud security best practices, standards, and frameworks (e.g., CIS Benchmarks, NIST, ISO 27001).
• Hands-on experience with cloud security tools and technologies (e.g., AWS Security services, Web Application Firewalls, Cloud Security Posture Management tools).
• Experience with infrastructure-as-code (IaC) tools such as Terraform or CloudFormation. CDK is a plus.
• Experience with Python programming and the boto3 library. TypeScript is a plus.
• Experience conducting security assessments and audits.
• Understanding of networking protocols and security technologies (e.g., VPN, Firewall, IDS/IPS).
• Knowledge of secure coding practices and common application security vulnerabilities.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.
• Ability to work effectively in a fast-paced, dynamic environment.