DevOps & Security Engineer

PENN ENGINEERING; Bengaluru; Sur place; INR 2 000 000 - 3 500 000; Plein temps

Résumé du poste

PENN ENGINEERING is seeking a DevSecOps Engineer in Bengaluru to accelerate secure software delivery across CI/CD, cloud infrastructure, and security practices.

You will mentor engineers, implement security in every stage of delivery, and partner with architects to improve platform security posture while maintaining fast release cycles.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or a related technical field.
• 5-7 years in DevOps, platform engineering, or SRE with security embedded in practice.
• Hands-on AWS experience: VPC, ECS/EKS, Lambda, API Gateway, IAM, GuardDuty, Security Hub, CloudWatch.
• Infrastructure as code using Terraform or AWS CDK is non-negotiable.
• CI/CD pipelines with integrated security tooling: GitHub Actions, GitLab CI, or AWS CodePipeline.
• Practical security experience: least-privilege IAM, secrets management, SAST/DAST tooling, encryption.
• Familiarity with CIS Benchmarks and NIST controls at implementation level.
• Experience with structured logging, distributed tracing, and production alerting.

Responsabilités

• Design, maintain, and improve CI/CD pipelines with integrated security gates.
• Build pipeline patterns for engineering teams with minimal friction.
• Own environment promotion practices (dev to prod) with security approvals.
• Contribute to developer experience standards to reduce friction.
• Manage and improve AWS infrastructure using Terraform or AWS CDK.

Connaissances

DevSecOps

CI/CD

AWS

Security tooling

IAM & encryption

SRE practices

Mentoring

Formation

Bachelor's degree in Computer Science or related field

Outils

Terraform

AWS CDK

GitHub Actions

GitLab CI

AWS CodePipeline

Description du poste

Relevant Experience: 5-7 Years in DevOps / Security-embedded delivery

Position Summary:

As PennEngineering accelerates its Speed of Now transformation, the Customer Experience (CX) team is responsible for customer-facing digital products. We are looking for a DevSecOps Engineer who keeps our delivery pipelines fast, secure, and reliable. This is a mid-senior individual contributor role with a mentoring component: you will work across CI/CD, cloud infrastructure, and security practices, ensuring security is built into every stage of delivery rather than bolted on at the end. You will also help bring junior and mid-level engineers up to speed on platform and security fundamentals.

Key Responsibility

• Design, maintain, and improve CI/CD pipelines with integrated security gates: SAST, dependency scanning, container image scanning, and secrets detection before production
• Build pipeline patterns that engineering teams adopt with minimal friction
• Own environment promotion practices (dev to stage to prod) with appropriate quality and security approvals
• Contribute to developer experience standards that reduce friction and keep engineers productive
• Manage and improve AWS infrastructure using Terraform or AWS CDK; all infrastructure in code
• Support multi-environment AWS structure (dev, stage, prod) with secure account segmentation
• Work with networking components including VPC, CloudFront, WAF, and Route 53
• Contribute to cost visibility and tagging standards so engineering teams see the cost impact of their decisions

3. Security Engineering (Embedded, Not Siloed)

• Implement and maintain security controls across IAM, secrets management, network segmentation, and encryption
• Run and triage vulnerability scanning, dependency audits, and compliance checks as part of standard delivery
• Support CIS Benchmark and NIST control alignment; flag gaps and help remediate them
• Partner with the DevOps Architect and Application Architect on security architecture decisions

4. Observability & Incident Response

• Contribute to the observability stack: structured logging, distributed tracing, metrics, and alerting
• Participate in incident response, help write and maintain runbooks, and contribute to on-call readiness
• Track SLIs and SLOs for customer-facing products and flag availability or performance issues early

5. Operational Data Visualization & Enterprise Data

• Coach junior and mid-level engineers on DevSecOps practices, security hygiene, and pipeline standards
• Document platform standards and security runbooks in a way that is accessible and actionable
• Participate in code and infrastructure reviews with a constructive, teaching-oriented approach

Requirements:

• Bachelor's degree in Computer Science, Engineering, or a related technical field
• 5-7 years in DevOps, platform engineering, or SRE with security meaningfully embedded in that experience
• Hands-on AWS experience: VPC, ECS or EKS, Lambda, API Gateway, IAM, GuardDuty, Security Hub, CloudWatch
• Infrastructure as code using Terraform or AWS CDK; this is non-negotiable
• CI/CD pipeline experience with integrated security tooling: GitHub Actions, GitLab CI, or AWS CodePipeline
• Practical security experience: least-privilege IAM, secrets management, SAST/DAST tooling, encryption
• Familiarity with CIS Benchmarks and NIST controls at an implementation level, not just awareness
• Experience with structured logging, distributed tracing, and alerting in production environments
• Clear communicator who can explain security and infrastructure decisions to both engineering peers and non-technical stakeholders

Preferred Qualifications:

• AWS Security Specialty or AWS DevOps Engineer Professional certification
• Experience with container security: image scanning, runtime policies, Kubernetes security posture
• Familiarity with compliance frameworks relevant to multi-region platforms (GDPR, data residency)
• Background in B2B, industrial, or manufacturing technology environments
• Platform availability: uptime and SLO attainment across all CX products
• Deployment frequency and change failure rate: DORA metrics across the engineering team
• Security posture: compliance with CIS/NIST controls; time-to-remediate identified vulnerabilities
• Infrastructure as code coverage: percentage of infrastructure managed in code
• Developer experience: time-to-first-deploy for new engineers; engineering team feedback scores
• Knowledge transfer: quality and adoption of runbooks, documentation, and mentoring contributions