Devsecops Engineer

Adroitent Inc.; Hyderabad, Pune District, Bengaluru; On-site; INR 2,500,000 - 5,500,000; Full time

Job summary

Adroitent Inc. in Hyderabad/Bangalore/Pune seeks an experienced DevSecOps professional to advance secure development practices. You will implement and optimize security across CI/CD, integrate SAST/DAST/SCA, and collaborate with cross‑functional teams to strengthen software supply chain security.

The role requires extensive hands-on DevSecOps and SSDLC knowledge, plus experience driving security automation in enterprise environments. Immediate joining is noted.

Qualifications

• 7+ years of experience in DevOps, DevSecOps, application security, or software engineering roles.
• 3+ years hands-on experience implementing DevSecOps practices and security automation.
• Experience supporting enterprise DevSecOps transformations, platform transitions, or modernization initiatives.
• Strong understanding of SSDLC and DevSecOps principles.
• Experience integrating security tools into CI/CD pipelines and development workflows.
• Experience implementing automated security controls, vulnerability management, and compliance.

Responsibilities

• Implement and enhance DevSecOps practices across development pipelines.
• Integrate security controls into CI/CD for automated validation and compliance checks.
• Configure and manage SAST/DAST/SCA, code quality, vulnerability scanning, and test automation.
• Embed security controls throughout the SDLC (shift-left).
• Configure policies, gates, scanning rules, dashboards, and workflows.
• Integrate DevSecOps tools with source repos, CI/CD, artifact repos, and deployment tools.
• Conduct security assessments, vulnerability analysis, and remediation support.
• Support secure software supply chain practices including artifact validation and dependency scanning.
• Assist teams with DevSecOps adoption, automation improvements, and security process optimization.
• Troubleshoot CI/CD pipeline issues related to security tooling and integrations.
• Develop technical docs, configuration guides, and operation procedures.
• Collaborate with application, cybersecurity, cloud, and engineering teams to improve security posture.
• Support compliance with ISO 27001, NIST, CIS, OWASP, PCI-DSS, SOC 2.

Skills

DevSecOps

CI/CD

SAST

DAST

SCA

Code Quality

SSDLC

Security Automation

Threat Modelling

Platform Integrations

Tools

SonarQube

Checkmarx

Invicti

Coverity

Jenkins

GitHub Actions

Azure DevOps

GitLab

JFrog Artifactory

Job description

Dear Candidate,

we Have openings for Devsecops developer for Bangalore / Hyderabad / Pune Location.

Note: immediate joiner.

Job Decsription.

Key Responsibilities

• Implement and enhance DevSecOps practices across application development and delivery processes.
• Integrate security controls into CI/CD pipelines to enable automated security validation and compliance checks.
• Configure and manage application security tools including SAST, DAST, SCA, code quality, vulnerability scanning, and test automation platforms.
• Implement shift-left security practices by embedding security controls throughout the SDLC.
• Configure security policies, quality gates, scanning rules, dashboards, reports, and workflow automation.
• Support integration of DevSecOps tools with source code repositories, CI/CD platforms, artifact repositories, and deployment automation tools.
• Perform security assessments, vulnerability analysis, and remediation support for applications and infrastructure.
• Support secure software supply chain practices, including artifact validation, dependency scanning, and build security controls.
• Assist teams with DevSecOps adoption, automation improvements, and security process optimization.
• Troubleshoot CI/CD pipeline issues, security tooling issues, and integration challenges.
• Develop technical documentation, configuration guides, operational procedures, and knowledge transfer materials.
• Collaborate with application teams, cybersecurity teams, cloud teams, and engineering teams to improve security posture.
• Support compliance and governance requirements aligned with frameworks such as ISO 27001, NIST, CIS Benchmarks, OWASP, PCI-DSS, and SOC 2.
• DevSecOps Platform Responsibilities
• SonarQube: Configure and transition code quality capabilities, including projects, quality profiles, quality gates, rules, dashboards, permissions, and CI/CD pipeline integrations.
• Checkmarx: Configure and transition SAST capabilities, including application onboarding, scan policies, security rules, user access, reporting dashboards, and CI/CD integrations.
• Invicti: Configure and transition DAST capabilities, including application targets, scan profiles, authentication settings, vulnerability workflows, reporting, and automation integrations.
• Coverity: Configure and transition static code analysis capabilities, including projects, analysis settings, defect workflows, reporting, user access, and build pipeline integrations.
• IrisRisk: Configure and transition application risk management capabilities, including risk assessment workflows, security processes, user roles, reporting, and governance integrations.
• Ranorex: Configure and transition test automation capabilities, including test suites, execution environments, reporting, and CI/CD automation integrations.
• Black Duck SCA / BDBA: Configure and transition software composition analysis capabilities, including projects, scanning policies, vulnerability reporting, security rules, user access, and CI/CD integrations.
• AssetPanda: Configure and transition asset management capabilities, including asset workflows, inventory structures, custom fields, user roles, permissions, integrations, and reporting.
• DevSecOps & CI/CD Integration Experience
• Experience integrating DevSecOps platforms with:
• GitHub Enterprise
• GitHub Actions
• Azure DevOps
• GitLab Enterprise
• Jenkins
• Argo CD Enterprise
• JFrog Artifactory

Experience should include

• Integrating SAST, DAST, SCA, and code quality tools into CI/CD pipelines.
• Configuring automated security scans, compliance checks, and quality gates.
• Managing pipeline integrations, service connections, credentials, tokens, and API integrations.
• Supporting secure build, test, and deployment automation.
• Troubleshooting CI/CD pipeline failures related to security tooling and integrations.
• Required Skills & Experience
• Required Experience
• 7+ years of experience in DevOps, DevSecOps, application security, or software engineering roles.
• 3+ years of hands‑on experience implementing DevSecOps practices and security automation.
• Experience supporting enterprise DevSecOps transformations, platform transitions, or modernization initiatives.
• Strong understanding of Secure Software Development Lifecycle (SSDLC) and DevSecOps principles.
• Experience integrating security tools into CI/CD pipelines and development workflows.
• Experience implementing automated security controls, vulnerability management processes, and compliance requirements.
• Experience working with development, security, infrastructure, and operations teams.

Best Regards,

jyothi