DevSecOps Engineer

Antino; Gurugram District; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Antino is seeking a DevSecOps Engineer in Gurgaon with 3+ years of experience to secure CI/CD pipelines, cloud and container deployments. You will integrate security into the SDLC, manage IAM and secrets, and support audits while collaborating with multiple teams.

Hands-on with cloud platforms and IaC tools is essential for scalable, secure operations. The role emphasizes proactive security testing, vulnerability management, and incident response within a fast-paced development environment.

Qualifications

• 3+ years of DevSecOps and cloud security experience.
• Hands-on in securing CI/CD pipelines, cloud infrastructure, containers and deployments.
• Experience in integrating security across the SDLC and audits.

Responsibilities

• Implement and maintain secure CI/CD pipelines.
• Integrate security controls into DevOps workflows.
• Perform vulnerability assessments on apps, containers, and infra.
• Automate security testing within build and deployment pipelines.
• Monitor cloud environments and enforce security best practices.
• Collaborate with Dev, QA, and Infra teams to remediate vulnerabilities.
• Configure IAM, access controls, and secrets management.
• Support compliance initiatives and audits.
• Monitor, investigate, and respond to security incidents.
• Incorporate IaC security best practices.
• Ensure secure containerization and Kubernetes deployments.

Skills

AWS

Azure

GCP

CI/CD

Docker

Kubernetes

Linux

AppSec

Vulnerability Management

IAM & Secrets

Terraform

CloudFormation

Snyk

Trivy

OWASP ZAP

SAST/DAST

Security Testing

Cloud Security

Education

Bachelor's degree in Computer Science/Information Technology

Tools

Terraform

CloudFormation

SonarQube

Snyk

Trivy

OWASP ZAP

Checkmarx

Veracode

Aqua Security

Prisma Cloud

ELK Stack

Grafana

Prometheus

CloudWatch

Jenkins

GitHub Actions

GitLab CI/CD

Job description

Position: DevSecOps Engineer

Location: Gurgaon

Work Experience- 3- 5 years

Job Description

We are looking for a passionate and skilled DevSecOps Engineer with 3+ years of experience in DevOps and cloud security practices. The ideal candidate should have hands‑on experience in implementing security across CI/CD pipelines, cloud infrastructure, containerized environments, and application deployments. The role involves integrating security into every stage of the software development lifecycle (SDLC) while ensuring scalable, reliable, and secure deployments.

Key Responsibilities

• Implement and maintain secure CI/CD pipelines.
• Integrate security controls into DevOps processes and workflows.
• Perform vulnerability assessments and security scans on applications, containers, and infrastructure.
• Automate security testing within build and deployment pipelines.
• Monitor cloud environments and ensure adherence to security best practices.
• Collaborate with Development, QA, and Infrastructure teams to remediate security vulnerabilities.
• Configure and manage IAM policies, access controls, and secrets management.
• Support compliance initiatives and security audits.
• Monitor, investigate, and respond to security incidents.
• Implement Infrastructure as Code (IaC) security best practices.
• Ensure secure containerization and Kubernetes deployments.

Required Skills

AWS/Azure/GCP, CI/CD (Jenkins, GitHub Actions, GitLab CI/CD), Docker, Kubernetes, Linux

Administration, Shell Scripting, Application Security (AppSec), Vulnerability Management, OWASP Top 10,

Security Testing (SAST/DAST), Container Security, Cloud Security, Identity & Access Management (IAM),

Secrets Management, Terraform, CloudFormation (Good to Have), SonarQube, Snyk, Trivy, OWASP ZAP,

Checkmarx, Veracode, Aqua Security, Prisma Cloud, ELK Stack, Grafana, Prometheus, CloudWatch.

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Experience working in Agile/Scrum environments.
• Understanding of Secure SDLC principles.
• Knowledge of security compliance standards such as ISO 27001, SOC 2, PCI-DSS, or GDPR.

Mandatory Skills

DevSecOps | AWS | Azure | GCP | Jenkins | GitHub Actions | GitLab CI/CD | Docker |

Kubernetes | Terraform | SonarQube | Snyk | Trivy | OWASP | IAM | Cloud Security | Container Security |

Linux | CI/CD | Vulnerability Management.