DevSecOps Engineer

Cerebra; Chennai District; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

Cerebra is seeking a DevSecOps Engineer in Chennai with 7–12 years of experience to design, implement, and secure CI/CD pipelines across cloud environments. You’ll work with SAST/DAST/SCA tooling, secret management, and infrastructure as code to ensure secure software delivery.

Candidate should be proficient in Python/Bash/Go and IaC tools like Terraform/Ansible, with hands-on experience in container and cloud security. On-site role with MNC clients in Chennai, immediate / short notice preferred.

Qualifications

• Experience: 7 to 12 years
• Location: Chennai
• Strong DevSecOps and cloud security focus
• Hands-on with secure CI/CD pipelines and multiple security testing tools

Skills

Secure CI/CD

SAST

DAST

SCA

Secrets Detection

OPA/Rego

Checkov

SSDLC

Container Security

Cloud Security

Python/Bash/Go

Terraform

Ansible

SBOM/NIST SSDF

Tools

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Harness

SonarQube

Checkmarx

Snyk Code

Veracode

ZAP

Burp Suite

Rapid7

StackHawk

Snyk

Black Duck

Dependabot

Nexus Lifecycle

tfsec

Terrascan

Kyverno

GitGuardian

TruffleHog

Gitleaks

Vault

Azure Key Vault

AWS Secrets Manager

GCP Secret Manager

Trivy

Grype

Prisma Cloud

Cosign

Sigstore

Artifact signing

Job description

Immediate /Short Notice Only - Cerebra Payroll - MNC Client

[e-mail]
Only Whatsapp: [phone]

DevSecOps Engineer

Experience: 7 to 12 Years
Location: Chennai

Skills: Secure CI/CD, SAST, DAST, SCA, Secrets Detection, OPA/Rego, Checkov, SSDLC, Container Security, Cloud Security, Python/Bash/Go, Terraform.

Key Requirements:

• GitHub Actions, GitLab CI, Azure DevOps, Jenkins, Harness
• SAST: SonarQube, Checkmarx, Snyk Code, Veracode
• DAST: ZAP, Burp Suite, Rapid7, StackHawk
• SCA: Snyk, Black Duck, Dependabot, Nexus Lifecycle
• OPA/Rego, Checkov, tfsec, Terrascan, Kyverno
• GitGuardian, TruffleHog, Gitleaks
• Vault, Azure Key Vault, AWS/GCP Secret Manager
• Trivy, Grype, Prisma Cloud
• Cosign/Sigstore and artifact signing
• Python/Bash/Go
• Terraform/Ansible
• SBOM, SLSA and NIST SSDF preferred