DevSecOps & Application Security Engineer

Keka Technologies Private Limited; Ernakulam; On-site; INR 3,000,000 - 5,200,000; Full time

Job summary

Keka Technologies Private Limited is seeking a DevSecOps & Application Security Engineer to strengthen security across infrastructure-as-code, cloud platforms, and the secure SDLC. The role emphasizes hands-on Terraform, AWS and Azure security, and application security practices within a regulated banking/FS client context.

You will implement policy-as-code, deploy Veracode and GitHub Advanced Security, and manage CyberArk PAM and PKI deployments, contributing to runbooks and audit readiness

Qualifications

• 7+ years in cybersecurity operations, cloud security, or DevSecOps.
• Hands-on Terraform coding and IaC code reviews.
• Deep AWS and Microsoft security and architecture experience.
• Application security experience with SAST/DAST/SCA.
• Experience with Veracode and/or GitHub Advanced Security.
• CyberArk PAM and PKI deployment experience.
• BFSI or regulated industry experience preferred.

Responsibilities

• Design, develop, and review Terraform (IaC) with a security-first approach; perform IaC code reviews.
• Architect and implement deep technical security controls across AWS and Microsoft (Azure / Microsoft security) environments
• Embed application security practices across design and delivery
• Implement policy-as-code enforcement across the SDLC — PR-time, pipeline-time, deploy-time, and runtime
• Set up and operationalize Veracode and/or GitHub Advanced Security
• Deploy and support CyberArk PAM and PKI
• Contribute to security runbooks, pipeline standards, and process documentation
• Support audit and compliance evidence gathering
• Escalate and coordinate on critical security events with senior leadership

Skills

Terraform

IaC review

AWS security

Azure security

Application security

Veracode

GitHub Advanced Security

CyberArk PAM

PKI deployment

Tools

Veracode

GitHub Advanced Security

CyberArk

PKI

Job description

DevSecOps & Application Security Engineer

7+ Years

Full-Time

DevSecOps & Application Security Engineer

Role Summary:

Experienced security practitioner focused on DevSecOps, application security, and cloud security architecture, supporting a banking/financial services client’s secure SDLC, infrastructure-as-code, supply-chain security, and privileged access / PKI controls.

Key Responsibilities:

Design, develop, and review Terraform (IaC) with a security-first approach; perform IaC code reviews

Architect and implement deep technical security controls across AWS and Microsoft (Azure / Microsoft security) environments

Embed application security practices across design and delivery

Implement policy-as-code enforcement across the SDLC — PR-time, pipeline-time, deploy-time, and runtime

Set up and operationalize Veracode and/or GitHub Advanced Security

Deploy and support CyberArk PAM and PKI

Contribute to security runbooks, pipeline standards, and process documentation

Support audit and compliance evidence gathering

Escalate and coordinate on critical security events with senior leadership

Required Experience:

7+ years in cybersecurity operations/engineering, cloud security, or DevSecOps

Hands-on Terraform coding and IaC code review experience

Deep technical AWS and Microsoft security and architecture experience

Application security experience

History of setting up Veracode and/or GitHub Advanced Security

CyberArk PAM and PKI deployment experience

BFSI or other regulated-industry experience preferred

Core Technical Expertise:

Terraform / infrastructure-as-code security and code review

AWS security architecture; Microsoft Azure / Microsoft security architecture

DevSecOps toolchains and secure SDLC integration

Application security (SAST/DAST/SCA in practice)

Policy-as-code across PR, pipeline, deploy, and runtime

CyberArk PAM (deployment); PKI (deployment)

Veracode and/or GitHub Advanced Security

Preferred Certifications

AWS Certified Security – Specialty; Microsoft security/architecture certifications (e.g., AZ-500, SC-100, or equivalent) as applicable