DevSecOps

ERM Placement Services; Navi Mumbai; On-site; INR 900,000 - 1,300,000; Full time

Job summary

ERM Placement Services in Navi Mumbai is seeking a DevSecOps Engineer to integrate security tooling across CI/CD pipelines and automate security scans, including SAST, DAST, and SCA. You will model threats, assess infrastructure and applications, and enforce security best practices across development and deployment environments.

You will collaborate with development and operations teams to remediate vulnerabilities, manage IaC security with Terraform and CloudFormation, and build secure

Responsibilities

• Integrate security tools and practices into CI/CD pipelines.
• Automate security scans (SAST, DAST, SCA, container security etc.).
• Conduct threat modelling and security assessments on infrastructure and applications.
• Develop and enforce security best practices across development and deployment environments.
• Collaborate with development and operations teams to remediate vulnerabilities.
• Manage and monitor infrastructure-as-code (IaC) with security in mind (e.g., Terraform, CloudFormation).
• Practical experience designing, developing, and maintaining CI/CD pipelines with GitHub Actions and/or Jenkins.
• Experience writing and optimizing automation for build, deployment, and ops tasks using shell scripting and Linux commands.
• Experience with containers and orchestration: Docker and Kubernetes.
• Experience in software development and infrastructure development is a plus.
• Experience with Git and Artifact management (e.g., Artifactory, Docker Trusted Registry).
• Support compliance initiatives (e.g., SOC2, ISO 27001, PCI-DSS).
• Stay up to date with the latest security threats, vulnerabilities, and technologies.

Skills

Shell scripting

Linux commands

Tools

SAST

DAST

SCA

container security

Terraform

CloudFormation

GitHub Actions

Jenkins

Docker

Kubernetes

Git

Artifactory

Docker Trusted Registry

Job description

• Integrate security tools and practicesinto CI/CD pipelines.
• Automate security scans(SAST, DAST, SCA, container securityetc.).
• Conduct threat modellingand security assessmentson infrastructure and applications.
• Develop and enforce security best practicesacross development and deployment environments.
• Collaborate with development and operations teamsto remediate vulnerabilities.
• Manage and monitor infrastructure-as-code (IaC)with security in mind (e.g., Terraform, CloudFormation).
• Practical experience designing, developing, and maintaining CI/CD pipelineswith GitHub Actionsand/or Jenkins.
• Experience writing and optimizing automationfor build, deployment, and ops tasks using shell scriptingand Linux commands.
• Experience with containers and orchestration: Dockerand Kubernetes.
• Experience in software developmentand infrastructure developmentis a plus.
• Experience with Gitand Artifact management(e.g., Artifactory, Docker Trusted Registry).
• Support compliance initiatives(e.g., SOC2, ISO 27001, PCI-DSS).
• Stay up to date with the latest security threats, vulnerabilities, and technologies.