Devsecops Engineer

Capgemini; Mumbai, Bengaluru; Hybrid; INR 1,800,000 - 2,800,000; Full time

Job summary

Capgemini is seeking a DevSecOps specialist to deploy container security products, automate integrations, and patch vulnerabilities across CI/CD pipelines. You will lead efforts in SAST/DAST, secure container workloads, and collaborate with security and development teams to advance automation.

The role requires hands-on experience with Jenkins, Docker, Kubernetes/OpenShift/ROSA, and RESTful APIs, plus familiarity with Agile practices and security standards such as NIST.

Qualifications

• Proven expertise deploying one of the commercial container security products.
• Expertise in SAST and DAST.
• Advanced expertise in securing containerized workloads with CI/CD tooling.

Responsibilities

• Deploy container security solutions and close gaps via development, automation, API integrations, and patching vulnerabilities.
• Assist in selecting and implementing tools to mature DevSecOps practices.
• Identify automation opportunities and collaborate with engineering and security teams to implement them.
• Develop and support security testing and validation tooling.
• Design container image security lifecycle in CI/CD pipelines (source control, integration, deployment).
• Stay updated on industry trends; research and test new techniques for SDLC.

Skills

Container security

SAST

DAST

Jenkins

Docker

Kubernetes

OpenShift/ROSA

Automation

RESTful APIs

Python

Microservices

Service mesh

Agile methodologies

Vulnerability patching

CI/CD security

NIST standards

Tools

Bitbucket

Azure DevOps

Tekton

Nexus

OpenShift

ROSA

Red Hat Advanced Cluster Security

Job description

Role & responsibilities

Proven expertise deploying one of the commercial container security products and closing the gaps through development, automation, API integrations, and researching and closing vulnerabilities via patching.

Expertise in SAST and DAST

• Advanced expertise in securing containerized workloads (familiarity with Jenkins, Docker, Kubernetes/OpenShift/ROSA).
• Assist selecting and implementing tools that will elevate the maturity of the DevSecOps practice.
• Identify opportunities for automation, partner with engineering and security teams on implementing automation.
• Develop and support development of security testing and validation tooling.
• Desing and implement container image security lifecycle in CI/CD pipeline covering source control, integration, and deployment (ex: Bitbucket, Azure DevOps, Tekton, Nexus, OpenShift, ROSA, Red Hat Advanced Cluster Security or equivalent contain).
• Stay abreast of industry trends and best practices; conduct research, tests, and execute new techniques that can be reused and applied to SDLC.
• Proficient with language - python.
• Familiarity with development using RESTful APIs.
• Familiarity with microservice and service mesh architecture.
• Familiarity of advanced iterative Agile methodologies.
• Familiarity to security standards such as NIST 800-53, NIST 800-190 and NIST 800-204A