DevSecOps & Application Security Engineer

Keka Technologies Private Limited; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Keka Technologies Private Limited in Hyderabad, India, is seeking an experienced DevSecOps & Application Security Engineer to join our security team. You will focus on DevSecOps, application security, and cloud security architecture to support secure SDLC, IaC, supply-chain security, and PKI controls for a banking/financial services client.

The role emphasizes hands-on Terraform, AWS and Azure security, policy-as-code, and integration of security testing tools like Veracode or GitHub Advanced

Qualifications

• 7+ years in cybersecurity operations/engineering, cloud security, or DevSecOps.
• Hands-on Terraform coding and IaC code review experience.
• Deep technical AWS and Microsoft security and architecture experience.
• Application security experience.
• History of Veracode and/or GitHub Advanced Security deployment in BFSI or regulated industries preferred.

Responsibilities

• Design, develop, and review Terraform (IaC) with a security-first approach.
• Architect and implement deep technical security controls across AWS and Microsoft environments.
• Embed application security practices across design and delivery.
• Implement policy-as-code enforcement across the SDLC — PR-time, pipeline-time, deploy-time, and runtime.
• Drive supply-chain security: Sigstore/cosign, SBOM generation, SLSA-aligned provenance, dependency pinning, runner isolation.
• Set up and operationalize Veracode and/or GitHub Advanced Security.
• Deploy and support CyberArk PAM and PKI.
• Contribute to security runbooks, pipeline standards, and process documentation.
• Support audit and compliance evidence gathering.
• Escalate and coordinate on critical security events with senior leadership.

Skills

DevSecOps

Application security

Cloud security

IaC review

Policy-as-code

Tools

Terraform

AWS

Azure

Veracode

GitHub Advanced Security

CyberArk PAM

Sigstore/cosign

Job description

DevSecOps & Application Security Engineer

7+ Years

Full-Time

DevSecOps & Application Security Engineer

Role Summary: Experienced security practitioner focused on DevSecOps, application security, and cloud security architecture, supporting a banking/financial services client’s secure SDLC, infrastructure-as-code, supply‑chain security, and privileged access / PKI controls.

Key Responsibilities

• Design, develop, and review Terraform (IaC) with a security-first approach
• perform IaC code reviews Architect and implement deep technical security controls across AWS and Microsoft (Azure / Microsoft security) environments
• Embed application security practices across design and delivery
• Implement policy-as-code enforcement across the SDLC — PR-time, pipeline-time, deploy-time, and runtime
• Drive supply-chain security: signed builds (Sigstore/cosign), SBOM generation, SLSA-aligned provenance, dependency pinning, runner isolation
• Set up and operationalize Veracode and/or GitHub Advanced Security
• Deploy and support CyberArk PAM and PKI
• Contribute to security runbooks, pipeline standards, and process documentation
• Support audit and compliance evidence gathering
• Escalate and coordinate on critical security events with senior leadership

Required Experience

• 7+ years in cybersecurity operations/engineering, cloud security, or DevSecOps
• Hands-on Terraform coding and IaC code review experience
• Deep technical AWS and Microsoft security and architecture experience
• Application security experience

History of setting up Veracode and/or GitHub Advanced Security CyberArk PAM and PKI deployment experience BFSI or other regulated-industry experience preferred

Core Technical Expertise

• Terraform / infrastructure-as-code security and code review
• AWS security architecture
• Microsoft Azure / Microsoft security architecture
• DevSecOps toolchains and secure SDLC integration
• Application security (SAST/DAST/SCA in practice)
• Policy-as-code across PR, pipeline, deploy, and runtime
• Supply-chain security: Sigstore/cosign, SBOM, SLSA-aligned provenance, dependency pinning, runner isolation
• CyberArk PAM (deployment); PKI (deployment)
• Veracode and/or GitHub Advanced Security

Preferred Certifications

• AWS Certified Security – Specialty
• Microsoft security/architecture certifications (e.g., AZ-500, SC-100, or equivalent) as applicable