Devsecops Engineer

Tata Motors Global Services Limited; Pimpri; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Tata Motors Global Services Limited is seeking a DevSecOps Engineer to own the end-to-end security-enabled software delivery pipeline for the Connected Cars Platform. You will design, build, and continuously improve CI/CD/CT pipelines, security toolchains, and internal developer platforms that underpin SDV software from embedded ECU firmware to cloud backend services.

The role requires hands-on ownership of CI/CD pipelines in an automotive context, plus strong expertise in SAST/DAST/SCA and

Qualifications

• Total software engineering experience of at least 3 years.
• At least 2 years in DevSecOps/platform engineering.
• Hands-on ownership of CI/CD pipelines in embedded/automotive environments.
• Experience in SDV/connected vehicle domain preferred.

Responsibilities

• Own end-to-end DevSecOps within Connected Cars Platform engineering.
• Design, build and improve CI/CD/CT pipelines, security toolchains and internal developer platforms.

Skills

CI/CD expertise

Security mindset

Automation

Tools

Jenkins

GitHub Actions

GitLab CI

ArgoCD

Job description

Purpose of the Role :

• This role owns the end-to-end DevSecOps discipline within the Connected Cars Platform engineering organisation. The engineer designs, builds, and continuously improves the CI/CD/CT pipelines, security toolchains, and internal developer platforms that underpin software delivery for Software Defined Vehicle (SDV) programmes from embedded ECU firmware to cloud backend services. Security is baked into the delivery wiring harness, not bolted on at gate review.
• The primary accountability is threefold: keep the build-deploy-validate pipeline fast and provably secure; conduct systematic cybersecurity assessments of vehicle binaries, OTA packages, and cloud APIs; and author the Python-based internal tooling that automates repetitive security, compliance, and diagnostic workflows. The engineer works across embedded Linux, AAOS, and AWS stacks, and is the team's authority on SAST/DAST/SCA, binary hardening verification, and secure OTA chain-of-custody

Experience :

• Minimum 3 years of total software engineering experience, with at least 2 years in DevSecOps/ platform engineering,
• Demonstrated hands-on ownership of CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions) in a product-grade embedded or automotive environment.
• Proven experience conducting binary security assessments and/or penetration testing on embedded firmware or automotive ECU targets.
• Experience in the SDV / connected vehicle domain is strongly preferred; automotive Tier-1 or OEM background is an advantage

Technical Expertise – DevSecOps & Pipeline Engineering :

• Strong expertise in CI/CD/CT toolchains: Jenkins (Declarative/Scripted), GitHub Actions, GitLab CI, ArgoCD.
• experience with SAST tools (Coverity, Semgrep, CodeQL), SCA (Black Duck, OWASP Dependency-Check), and DAST (OWASP ZAP, Burp Suite).
• Proficiency in containerized build environments: Docker, Kubernetes/EKS, Helm; experience with Yocto SDK containers.
• Understanding of Infrastructure-as-Code: Terraform or AWS CDK for pipeline infrastructure.

Technical Expertise – Python & Internal Tooling :

• Production-grade Python development: type annotations, pytest, async I/O, packaging (pyproject.toml / Poetry), internal PyPI distribution.
• Experience building REST APIs (FastAPI / Flask) and CLI tools (Click / Typer) for internal developer productivity.
• Familiarity with NVD / OSV vulnerability feeds, CVE correlation, and SBOM-driven dependency risk tooling.
• Scripting experience in Bash and familiarity with Groovy (Jenkins DSL); ability to read and debug Makefile and CMake build systems.