DevSecOps Engineer

1669 Kellogg Brown & Root Engineering & Construction India Private Limited; Bengaluru; Presencial; INR 1.800.000 - 2.800.000; Jornada completa

Descripción de la vacante

KBR in Bengaluru is seeking a DevSecOps Engineer to embed security into the software delivery lifecycle. This role uses Azure DevOps, GitHub, SonarQube, Fortify, Katalon, and OpenShift to automate security, code quality, and compliance across pipelines.

You will migrate repositories and CI/CD workflows, develop reusable templates, and uphold governance while accelerating high-velocity deployments. The position requires 5+ years in DevOps/DevSecOps and strong scripting skills.

Formación

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience
• 5+ years of experience in DevOps, DevSecOps, or software engineering
• Hands-on experience with CI/CD platforms including Azure DevOps and GitHub
• Experience with application security and quality tools including SonarQube, Fortify, and Sonatype
• Experience executing repository and CI/CD pipeline migrations across platforms
• Experience implementing automated testing frameworks (Katalon or similar)
• Strong understanding of secure coding practices and OWASP Top 10
• Experience with container platforms such as OpenShift or Kubernetes
• Experience working in cloud environments, preferably Microsoft Azure
• Proficiency in scripting or programming (PowerShell, Python, Bash, or similar)

Responsabilidades

• Integrate security controls and best practices into CI/CD pipelines using Azure DevOps and GitHub Actions
• Configure and enforce code quality and security gates leveraging SonarQube and Fortify
• Implement Software Composition Analysis (SCA) using Sonatype to detect and remediate open-source vulnerabilities
• Embed vulnerability detection, secrets scanning, and policy enforcement into development workflows
• Collaborate with development teams to remediate security findings and improve secure coding practices
• Establish and maintain governance controls and branch protection policies in GitHub and Azure DevOps
• Support containerization and platform engineering practices using OpenShift, including image scanning and runtime security
• Implement and maintain cloud-native and hybrid security controls across Azure environments
• Monitor, triage, and respond to vulnerabilities identified across SDLC tooling and pipelines

Conocimientos

DevSecOps experience

CI/CD pipelines

Security tooling

OpenShift/Kubernetes

Scripting (PowerShell/Python)

Educación

Bachelor’s degree in Computer Science or related field

Herramientas

Azure DevOps

GitHub

SonarQube

Sonatype

Fortify

Katalon

OpenShift

Descripción del empleo

DevSecOps Engineer

The DevSecOps Engineer is responsible for integrating security practices into the software development lifecycle to enable secure, scalable, and compliant delivery of applications. This role leverages enterprise DevSecOps platforms—including Azure DevOps, GitHub, SonarQube, Sonatype, Fortify, Katalon, and OpenShift—to embed automated security, code quality, and compliance controls while supporting high-velocity software delivery. The role also supports platform evolution through repository and pipeline migrations and ongoing DevSecOps toolchain modernization.

Key Responsibilities (General)

• Integrate security controls and best practices into CI/CD pipelines using Azure DevOps and GitHub Actions
• Configure and enforce code quality and security gates leveraging SonarQube and Fortify
• Implement Software Composition Analysis (SCA) using Sonatype to detect and remediate open-source vulnerabilities
• Embed vulnerability detection, secrets scanning, and policy enforcement into development workflows
• Collaborate with development teams to remediate security findings and improve secure coding practices
• Establish and maintain governance controls and branch protection policies in GitHub and Azure DevOps
• Support containerization and platform engineering practices using OpenShift, including image scanning and runtime security
• Implement and maintain cloud-native and hybrid security controls across Azure environments
• Monitor, triage, and respond to vulnerabilities identified across SDLC tooling and pipelines

Migration & Platform Transformation

• Plan and execute migration of source code repositories between platforms (e.g., Azure DevOps to GitHub), ensuring integrity, history preservation, and minimal disruption
• Design, migrate, and optimize CI/CD pipelines to align with enterprise standards and target platforms
• Consolidate and rationalize DevSecOps toolchains during migrations to improve efficiency and reduce duplication

Tool Lifecycle & Continuous Modernization

• Manage lifecycle of DevSecOps tools, including version upgrades, patching, and feature adoption across SonarQube, Sonatype, Fortify, Katalon, GitHub, and Azure DevOps
• Evaluate and implement new capabilities, integrations, and enhancements across the DevSecOps platform stack
• Ensure compatibility, performance, and security posture are maintained during tool upgrades and platform changes
• Develop reusable pipeline templates, automation scripts, and security standards for enterprise adoption
• Ensure compliance with internal governance, security policies, and regulatory requirements
• Drive continuous improvement of DevSecOps maturity, automation, and toolchain integration

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience
• 5+ years of experience in DevOps, DevSecOps, or software engineering
• Hands-on experience with CI/CD platforms including Azure DevOps and GitHub
• Experience with application security and quality tools including SonarQube, Fortify, and Sonatype
• Experience executing repository and CI/CD pipeline migrations across platforms
• Experience implementing automated testing frameworks (Katalon or similar)
• Strong understanding of secure coding practices and common vulnerabilities (OWASP Top 10)
• Experience with container platforms such as OpenShift or Kubernetes
• Experience working in cloud environments, preferably Microsoft Azure
• Proficiency in scripting or programming (PowerShell, Python, Bash, or similar)

Preferred Qualifications

• Experience with GitHub Advanced Security and enterprise governance controls
• Experience leading large-scale DevSecOps platform migrations or transformations
• Familiarity with policy-as-code tools such as Open Policy Agent or Azure Policy
• Security certifications such as CISSP, CSSLP, or CEH
• Knowledge of regulatory and compliance frameworks (NIST, ISO 27001, SOC 2)

Belong. Connect. Grow. with KBR! #LI-GD1 KBR — Delivering Solutions, Changing the World.

About KBR

KBR — Delivering Solutions, Changing the World. KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives.

In everything we do, we are guided by our ONE KBR Values:

We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential.

We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders.

We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business.

We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed.

We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company.

We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals.

Fraud Alert

Fraud Alert Fraud has infiltrated the job placement market via the internet, email and direct phone contact. Attempts have included unauthorized use of KBR’s name and logo to solicit potential job seekers or to extend false job offers. Bad actors may mix in fake job advertisements with legitimate postings. These ads can include contact instructions and require job seekers to send sensitive personal information or money to pay for visa applications, processing fees, etc., in exchange for consideration for a high-paying position. KBR will never ask for any sort of advance payment as part of the recruiting/hiring process. Candidate profiles are carefully managed to protect personal information.