DevSecOps & Application Security Engineer - globalthoughtfocus

OpenTalent; Kerala; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

OpenTalent seeks an experienced DevSecOps & Application Security Engineer to strengthen our secure SDLC, IaC, and cloud security architecture for a banking/financial services client in India.

The role emphasizes Terraform, cloud security across AWS and Azure, and implementation of policy-as-code, supply-chain security, and PAM/PKI controls within a regulated environment.

Qualifications

• 7+ years in cybersecurity operations/engineering, cloud security, or DevSecOps.
• Hands-on Terraform coding and IaC code review experience.
• Deep technical AWS and Microsoft security and architecture experience.
• Application security experience.
• History of setting up Veracode and/or GitHub Advanced Security.
• CyberArk PAM and PKI deployment experience.
• BFSI or other regulated-industry experience preferred.

Responsibilities

• Design, develop, and review Terraform (IaC) with a security-first approach; perform IaC code reviews.
• Architect and implement deep technical security controls across AWS and Microsoft environments.
• Embed application security practices across design and delivery.
• Implement policy-as-code enforcement across the SDLC — PR-time, pipeline-time, deploy-time, and runtime.
• Drive supply-chain security: signed builds (Sigstore/cosign), SBOM generation, SLSA-aligned provenance, dependency pinning, runner isolation.
• Set up and operationalize Veracode and/or GitHub Advanced Security.
• Deploy and support CyberArk PAM and PKI.
• Contribute to security runbooks, pipeline standards, and process documentation.
• Support audit and compliance evidence gathering
• Escalate and coordinate on critical security events with senior leadership

Skills

Terraform

DevSecOps

AWS security

Application security

Policy-as-code

SAST/DAST/SCA

SBOM

Tools

Veracode

GitHub Advanced Security

Sigstore/cosign

PAM (CyberArk)

Job description

DevSecOps & Application Security Engineer

Role Summary:

Experienced security practitioner focused on DevSecOps, application security, and cloud security architecture, supporting a banking/financial services client’s secure SDLC, infrastructure-as-code, supply-chain security, and privileged access / PKI controls.

Key Responsibilities:

• Design, develop, and review Terraform (IaC) with a security-first approach; perform IaC code reviews
• Architect and implement deep technical security controls across AWS and Microsoft (Azure / Microsoft security) environments
• Embed application security practices across design and delivery
• Implement policy-as-code enforcement across the SDLC — PR-time, pipeline-time, deploy-time, and runtime
• Drive supply-chain security: signed builds (Sigstore/cosign), SBOM generation, SLSA-aligned provenance, dependency pinning, runner isolation
• Set up and operationalize Veracode and/or GitHub Advanced Security
• Deploy and support CyberArk PAM and PKI
• Contribute to security runbooks, pipeline standards, and process documentation
• Support audit and compliance evidence gathering
• Escalate and coordinate on critical security events with senior leadership

Required Experience:

• 7+ years in cybersecurity operations/engineering, cloud security, or DevSecOps
• Hands-on Terraform coding and IaC code review experience
• Deep technical AWS and Microsoft security and architecture experience
• Application security experience
• History of setting up Veracode and/or GitHub Advanced Security
• CyberArk PAM and PKI deployment experience
• BFSI or other regulated-industry experience preferred

Core Technical Expertise:

• Terraform / infrastructure-as-code security and code review
• AWS security architecture; Microsoft Azure / Microsoft security architecture
• DevSecOps toolchains and secure SDLC integration
• Application security (SAST/DAST/SCA in practice)
• Policy-as-code across PR, pipeline, deploy, and runtime
• Supply-chain security: Sigstore/cosign, SBOM, SLSA-aligned provenance, dependency pinning, runner isolation
• CyberArk PAM (deployment); PKI (deployment)
• Veracode and/or GitHub Advanced Security

Preferred Certifications:

• AWS Certified Security – Specialty; Microsoft security/architecture certifications (e.g., AZ-500, SC-100, or equivalent) as applicable