Devsecops Engineer

Mphasis; Chennai District, Pune District; On-site; INR 2,000,000 - 3,600,000; Full time

Job summary

Mphasis is seeking a DevSecOps Senior Engineer to lead the integration of security into the DevOps lifecycle in Chennai, India. You will drive the design and implementation of secure CI/CD pipelines, collaborate across development, operations, and security teams, and automate security testing and compliance checks.

You will mentor teams on secure coding practices, stay updated on threats, and develop security policies and guidelines to ensure regulatory compliance across projects.

Qualifications

• Experience embedding security into CI/CD and DevOps pipelines.
• Ability to design secure CI/CD pipelines and automate security checks.
• Knowledge of cloud security and compliance practices.

Responsibilities

• Lead the implementation of DevSecOps practices across projects, ensuring security is a fundamental component of development.
• Collaborate with development, operations, and security teams to design and implement secure CI/CD pipelines.
• Conduct security assessments and vulnerability scans, and provide actionable insights to development teams.
• Automate security testing and compliance checks within the CI/CD pipeline.
• Develop and maintain security policies, standards, and guidelines to ensure compliance with industry regulations.
• Provide training and support to development teams on secure coding practices and security tools.
• Monitor and respond to security incidents, ensuring timely resolution and reporting.
• Stay updated on the latest security trends, threats, and technologies to continuously improve security practices.

Skills

DevOps practices

CI/CD

Containerization

Orchestration

Scripting (Python, Bash)

Automation tools (Ansible)

Cloud platforms (AWS, Azure, GCP)

Security concepts

Education

Bachelor's degree in Computer Science / IT

Tools

SAST/DAST

Vulnerability Management

SIEM

Terraform/CloudFormation

CI/CD security tooling

Job description

Job Summary:

We are seeking a highly skilled DevSecOps Senior Engineer to join our dynamic team as a Process Lead. The ideal candidate will play a pivotal role in integrating security practices within the DevOps process, ensuring that security is embedded throughout the software development lifecycle. This position requires a strong understanding of both development and operations, with a focus on automating security processes and enhancing the overall security posture of our applications.

Responsibilities:

• Lead the implementation of DevSecOps practices across various projects, ensuring security is a fundamental component of the development process.
• Collaborate with development, operations, and security teams to design and implement secure CI/CD pipelines.
• Conduct security assessments and vulnerability scans, and provide actionable insights to development teams.
• Automate security testing and compliance checks within the CI/CD pipeline.
• Develop and maintain security policies, standards, and guidelines to ensure compliance with industry regulations.
• Provide training and support to development teams on secure coding practices and security tools.
• Monitor and respond to security incidents, ensuring timely resolution and reporting.
• Stay updated on the latest security trends, threats, and technologies to continuously improve security practices.

Mandatory Skills:

• Strong expertise in DevOps practices and tools, including CI/CD, containerization, and orchestration.
• Proficient in security tools and technologies, such as static and dynamic application security testing (SAST/DAST), vulnerability management, and security information and event management (SIEM).
• Experience with cloud platforms (AWS, Azure, GCP) and their security features.
• Solid understanding of application security principles and best practices.
• Familiarity with scripting and automation tools (e.g., Python, Bash, Ansible).
• Excellent problem-solving skills and the ability to work under pressure.

Preferred Skills:

• Experience with infrastructure as code (IaC) tools such as Terraform or CloudFormation.
• Knowledge of compliance frameworks (e.g., GDPR, PCI-DSS, ISO 27001).
• Familiarity with Agile methodologies and project management tools.
• Certifications in security (e.g., CISSP, CISM, CEH) or DevOps (e.g., AWS Certified DevOps Engineer).

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Strong analytical and communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Proven ability to work collaboratively in a team-oriented environment.