Devsecops Engineer

Deloitte Shared Services India; Bengaluru; Hybrid; INR 1,200,000 - 2,100,000; Full time

Job summary

Deloitte Shared Services India seeks a DevSecOps Engineer to lead security-focused CI/CD implementations in a cloud-first environment. The role emphasizes hands-on cloud security, secure development practices, and automated remediation within development and deployment pipelines.

You will work with AWS as the primary cloud, with exposure to Azure/GCP, and collaborate with development and security teams to strengthen security controls across the software lifecycle.

Qualifications

• Hands-on experience with AWS and cloud architecture; knowledge of Azure/GCP.
• Proficient in CI/CD pipeline development and IaC tooling.
• Experience with Node.js, Python, React, and databases PostgreSQL, MongoDB, DynamoDB.
• Experience integrating security tools like Checkmarx and Burp Suite into pipelines.
• Expertise in SAST, DAST, SCA, and secure SDLC practices.
• Ability to implement automated security controls across pipelines.
• Strong cloud security, application security, and DevSecOps automation.

Skills

Cloud architecture

CI/CD pipelines

Git

Terraform

Infrastructure as Code (IaC)

DevSecOps automation

Vulnerability management

Tools

AWS

Azure

GCP

Checkmarx

Burp Suite

Job description

DevSecOps Engineer

Experience: 57+ Years

Required Skills:

• Strong hands-on experience with AWS and cloud architecture, with knowledge of Azure/GCP.
• Expertise in CI/CD pipeline development, Git, Terraform, and Infrastructure as Code (IaC).
• Working knowledge of Node.js, Python, React, PostgreSQL, MongoDB, and DynamoDB.
• Experience integrating security tools such as Checkmarx and Burp Suite into DevSecOps pipelines.
• Expertise in vulnerability management, SAST, DAST, SCA, and secure SDLC practices.
• Ability to implement automated security controls across development and deployment pipelines.
• Strong understanding of cloud security, application security, and DevSecOps automation.

Key Requirement:

The resource should have strong hands-on experience in DevSecOps, cloud security, and application security, with the ability to independently implement security controls, automate remediation workflows, and collaborate with development and security teams.