Devsecops Engineer

Cloudxtreme; Bengaluru; Hybrid; INR 900,000 - 1,300,000; Full time

Job summary

Cloudxtreme in Bengaluru seeks a security engineer to design and implement controls across development and production. You will drive threat modeling, secure code reviews, and vulnerability assessments for web and cloud-native apps.

Collaborate with DevOps to integrate security into CI/CD, automate testing, monitor configurations with CSPM and CWPP, and enforce ISO 27001/NIST/CIS standards. You will lead zero-trust initiatives, guide secure architecture, container security, and data protection,

Responsibilities

• Design and implement security controls for applications and cloud environments across development and production stages.
• Conduct threat modeling, secure code review, and vulnerability assessments for web and cloud-native applications.
• Implement identity and access management, encryption, and key management practices in cloud environments.
• Collaborate with DevOps teams to integrate security into CI/CD pipelines and automate security testing.
• Monitor cloud configurations and posture using CSPM and CWPP tools to detect and remediate risks.
• Enforce compliance with frameworks such as ISO 27001, NIST, and CIS Benchmarks in application and cloud deployments.
• Investigate and respond to security incidents involving applications, APIs, or cloud resources.
• Implement Zero Trust and least privilege principles for application and infrastructure access.
• Provide guidance on secure application architecture, container security, and data protection strategies.
• Maintain documentation, dashboards, and metrics to report application and cloud security maturity to leadership.

Job description

Role & responsibilities

Preferred candidate profile

• Design and implement security controls for applications and cloud environments across development and production stages.
• Conduct threat modeling, secure code review, and vulnerability assessments for web and cloud-native applications.
• Implement identity and access management, encryption, and key management practices in cloud environments.
• Collaborate with DevOps teams to integrate security into CI/CD pipelines and automate security testing.
• Monitor cloud configurations and posture using CSPM and CWPP tools to detect and remediate risks.
• Enforce compliance with frameworks such as ISO 27001, NIST, and CIS Benchmarks in application and cloud deployments.
• Investigate and respond to security incidents involving applications, APIs, or cloud resources.
• Implement Zero Trust and least privilege principles for application and infrastructure access.
• Provide guidance on secure application architecture, container security, and data protection strategies.
• Maintain documentation, dashboards, and metrics to report application and cloud security maturity to leadership.