DevSecOps Expert

VOIS; Maharashtra; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

VOIS (Vodafone Intelligent Solutions) is seeking a DevSecOps Security Expert to embed, govern and optimise security controls across CI/CD pipelines and environments. You will drive secure software delivery, coordinate remediation of vulnerabilities and support risk management in non-production and production environments.

The role requires collaboration with vendors and technical teams to ensure security compliance and operational resilience, with hands-on experience in Jenkins, GitHub Actions

Qualifications

• Experience implementing CI/CD security practices and DevSecOps methodologies.
• Knowledge of pipeline platforms such as Jenkins, GitHub Actions and GitLab CI.
• Experience with security testing and scanning tools (SAST, DAST, SCA) and container security.
• Understanding IAM, privileged access controls and secrets management.
• Familiarity with vulnerability management and patch governance.
• Experience with cloud and infrastructure security best practices.
• Experience with SIEM solutions and security monitoring.
• Ability to interpret vulnerability findings and coordinate remediation.

Responsibilities

• Implement and manage security controls within CI/CD pipelines.
• Integrate and maintain security scanning solutions (SAST, DAST, SCA, container scans).
• Monitor, assess and coordinate remediation of vulnerabilities from scans.
• Ensure secure configuration and hardening of infrastructure and deployment environments.
• Validate vendor software releases for security before promotion across environments.
• Manage secrets, certificates and access controls in delivery pipelines.
• Collaborate with vendors and stakeholders to resolve security vulnerabilities.
• Monitor security alerts, threats and compliance deviations in environments.
• Support incident response activities and investigations as required.
• Analyze the wider tech ecosystem to identify security gaps and risks.
• Drive automation to improve security, reliability and delivery efficiency.
• Promote secure operational practices and timely remediation communications.
• Contribute to governance, dashboards and security reporting.

Skills

DevSecOps

CI/CD security

Vulnerability management

Security governance

Threat detection

Security incident response

Risk assessment

Collaboration

Tools

Jenkins

GitHub Actions

GitLab CI

SAST

DAST

SCA

Container security

Kubernetes security

Job description

Who We Are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.

Who We Are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.

As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in‑house and 3rd party capability.

We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.

#VOIS #BeUnrivalled #CreateTheFuture

About This Role

We are seeking a DevSecOps Security Expert to embed, govern and optimise security controls across CI/CD pipelines and operational environments. This role is responsible for integrating security into software delivery processes, identifying and coordinating remediation of vulnerabilities, supporting secure deployment practices, and strengthening the security posture of infrastructure and applications. The successful candidate will collaborate with technical teams and vendors to ensure security compliance, operational resilience, and effective risk management across non‑production and operational environments.

What You'll Do

• Implement and manage security controls within CI/CD pipelines
• Integrate and maintain security scanning solutions, including SAST, DAST, Software Composition Analysis (SCA), dependency scanning and container image scanning
• Monitor, assess and coordinate remediation of vulnerabilities identified through security scans
• Ensure secure configuration and hardening of infrastructure, containers and deployment environments
• Validate vendor software releases for security compliance before promotion across environments
• Manage secrets, certificates and access controls utilised within delivery pipelines
• Collaborate with vendors and stakeholders to resolve security vulnerabilities in delivered software components
• Monitor security alerts, threats and compliance deviations within operational environments
• Support incident response activities and security investigations where required
• Analyse the wider technical ecosystem to identify security gaps, dependencies and systemic risks
• Drive automation initiatives to improve security, reliability, scalability and delivery efficiency
• Promote secure operational practices and timely communication of security incidents, risks and remediation activities
• Contribute to monitoring, reporting, dashboards and security governance activities

Who You Are

• Experience implementing CI/CD security practices and DevSecOps methodologies
• Strong understanding of pipeline platforms such as Jenkins, GitHub Actions and GitLab CI
• Knowledge of container and Kubernetes security principles
• Experience working with security testing and scanning tools, including SAST, DAST, SCA and container security solutions
• Understanding of Identity and Access Management (IAM), privileged access controls and secrets management
• Knowledge of vulnerability management, remediation processes and patch governance
• Familiarity with cloud security and infrastructure security best practices
• Experience with security monitoring platforms and SIEM solutions
• Strong understanding of security governance, risk management and compliance standards
• Ability to interpret vulnerability findings, prioritise risk and coordinate remediation activities
• Strong attention to detail and a proactive approach to identifying and mitigating risk
• Effective collaboration, problem‑solving and stakeholder management skills
• Ability to work in complex environments and support decision‑making with speed and accuracy
• Commitment to innovation, continuous improvement and customer‑focused outcomes
• Experience in automation, monitoring, alerting, deployment operations and performance engineering

Not a perfect fit?

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

What's In It For You

• Opportunity to work on enterprise‑scale DevSecOps and cyber security programmes
• Exposure to modern security tooling across CI/CD, cloud, container and Kubernetes environments
• Opportunity to influence secure software delivery practices and operational security governance
• Collaborative environment focused on innovation, automation and continuous improvement
• Experience working with global stakeholders and technology partners across complex environments
• Opportunity to contribute to security resilience, risk reduction and business‑critical transformation initiatives

What Skills You Will Learn

• Advanced DevSecOps implementation and pipeline security practices
• Enterprise vulnerability management and remediation governance
• Security automation across CI/CD and infrastructure environments
• Container, Kubernetes and cloud security best practices
• Security monitoring, incident support and operational risk assessment
• Secure software delivery lifecycle management within large‑scale global environments
• Governance, compliance and security reporting capabilities
• Cross‑functional collaboration and stakeholder engagement within cyber security programmes

VOIS Equal Opportunity Employer Commitment

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio‑economic background.

Join Us

At Vodafone, we're working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this.

We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.

With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.