Devsecops Developer

ADROITENT; Hyderabad, Pune District, Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

ADROITENT is seeking a seasoned DevSecOps professional to lead platform configurations across SAST/DAST/SCA tools and CI/CD integrations for Bangalore, Hyderabad, or Pune locations.

The role requires 7+ years in DevOps/DevSecOps and 3+ years implementing security automation, with experience in enterprise transformations and SSDLC principles.

Qualifications

• 7+ years of experience in DevOps, DevSecOps, application security, or software engineering roles.
• 3+ years of hands-on experience implementing DevSecOps practices and security automation.
• Experience supporting enterprise DevSecOps transformations, platform transitions, or modernization initiatives.

Responsibilities

• Configure and transition DevSecOps platforms with SonarQube, Checkmarx, Invicti, Coverity, IrisRisk, Ranorex, Black Duck SCA, and AssetPanda.
• Integrate SAST, DAST, SCA, and code quality tools into CI/CD pipelines.
• Manage pipeline integrations, service connections, credentials, tokens, and API integrations.
• Support secure build, test, and deployment automation.
• Troubleshoot CI/CD pipeline failures related to security tooling and integrations.

Skills

DevSecOps

CI/CD

Security automation

SSDLC

Enterprise tooling

Tools

GitHub Enterprise

GitHub Actions

Azure DevOps

GitLab Enterprise

Jenkins

Argo CD

JFrog Artifactory

SonarQube

Checkmarx

Invicti

Coverity

Black Duck

Job description

Dear Candidate,

We have Openings for Bangalore / Hyderabad / Pune Location for Devsecops developer.

Job description.

DevSecOps Platform Responsibilities

• SonarQube: Configure and transition code quality capabilities, including projects, quality profiles, quality gates, rules, dashboards, permissions, and CI/CD pipeline integrations.
• Checkmarx: Configure and transition SAST capabilities, including application onboarding, scan policies, security rules, user access, reporting dashboards, and CI/CD integrations.
• Invicti: Configure and transition DAST capabilities, including application targets, scan profiles, authentication settings, vulnerability workflows, reporting, and automation integrations.
• Coverity: Configure and transition static code analysis capabilities, including projects, analysis settings, defect workflows, reporting, user access, and build pipeline integrations.
• IrisRisk: Configure and transition application risk management capabilities, including risk assessment workflows, security processes, user roles, reporting, and governance integrations.
• Ranorex: Configure and transition test automation capabilities, including test suites, execution environments, reporting, and CI/CD automation integrations.
• Black Duck SCA / BDBA: Configure and transition software composition analysis capabilities, including projects, scanning policies, vulnerability reporting, security rules, user access, and CI/CD integrations.
• AssetPanda: Configure and transition asset management capabilities, including asset workflows, inventory structures, custom fields, user roles, permissions, integrations, and reporting.

DevSecOps & CI/CD Integration Experience

Experience integrating DevSecOps platforms with:

• GitHub Enterprise
• GitHub Actions
• Azure DevOps
• GitLab Enterprise
• Jenkins
• Argo CD Enterprise
• JFrog Artifactory

Experience should include

• Integrating SAST, DAST, SCA, and code quality tools into CI/CD pipelines.
• Configuring automated security scans, compliance checks, and quality gates.
• Managing pipeline integrations, service connections, credentials, tokens, and API integrations.
• Supporting secure build, test, and deployment automation.
• Troubleshooting CI/CD pipeline failures related to security tooling and integrations.

Required Skills & Experience Required Experience

• 7+ years of experience in DevOps, DevSecOps, application security, or software engineering roles.
• 3+ years of hands-on experience implementing DevSecOps practices and security automation.
• Experience supporting enterprise DevSecOps transformations, platform transitions, or modernization initiatives.
• Strong understanding of Secure Software Development Lifecycle (SSDLC) and DevSecOps principles.
• Experience integrating security tools into CI/CD pipelines and development workflows.
• Experience implementing automated security controls, vulnerability management processes, and compliance requirements.
• Experience working with development, security, infrastructure, and operations teams.

Best Regards,

jyothi