Devsecops Engineer

smallcase; Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

A tech startup in Bengaluru is looking for a Security Engineer with 1.5 to 3 years of experience in IT or DevOps, particularly in cloud security. This role involves securing cloud environments, incident monitoring, and collaboration with DevOps for security integration. Ideal candidates should have hands-on experience with AWS and relevant security tools. Applicants should also be familiar with scripting and security concepts. This position offers a great opportunity to develop skills in a fast-paced environment.

Qualifications

• 1.5 to 3 years in IT, Security, or DevOps, focusing on cloud security.
• Hands-on experience with AWS and relevant security tools.
• Solid grasp of cloud networking and IAM.

Responsibilities

• Assist in securing cloud environments via IAM policies and network security.
• Monitor cloud security posture and respond to incidents.
• Collaborate with DevOps to integrate security into CI/CD.

Skills

Cloud Security

IAM policies

Python scripting

Collaboration

CI/CD Integration

Tools

AWS Security Hub

GuardDuty

Inspector

Kubernetes

Job description

Responsibilities

• Cloud Infrastructure Security: Assist in securing our cloud environments by implementing identity and access management (IAM) policies, network security groups, and encryption protocols.
• Monitoring and Incident Response: Monitor cloud security posture using native cloud tools and SIEMs. Assist in investigating and responding to security alerts.
• DevSecOps Integration: Collaborate with DevOps teams to integrate security scanning (SAST/DAST, container vulnerability scanning) into CI/CD pipelines.
• Vulnerability Management: Perform regular vulnerability assessments of cloud resources and work with engineering teams to patch and remediate findings in a timely manner.
• Compliance and Auditing: Support the compliance team by gathering evidence and ensuring cloud configurations align with industry frameworks.
• Automation: Help automate repetitive security tasks and guardrails using scripting (Python, Bash) or Infrastructure as Code.

Requirements

• Experience: 1.5 to 3 years of experience in IT, Security, or DevOps, with at least 1 year focused specifically on cloud security.
• Cloud Platform Knowledge: Hands-on experience with AWS and cloud security tools such as AWS Security Hub, GuardDuty, Inspector, etc.
• Solid understanding of cloud networking (VPCs, firewalls, routing) and IAM.
• Familiarity with Infrastructure as Code (IaC) principles.
• Basic scripting skills (e.g., Python, Bash) for automation.
• Security Fundamentals: Strong grasp of core security concepts (encryption, principle of least privilege, zero trust, vulnerability management).
• Collaboration: Excellent communication skills and a team-player mindset.
• Relevant industry certifications.
• Experience with containerization and Kubernetes security.
• Familiarity with Indian compliance frameworks.
• Familiarity with application security.