DevSecOps Expert

Vodafone Group Plc; Pune District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

VOIS (Vodafone Intelligent Solutions), part of Vodafone Group Plc, seeks a DevSecOps Security Expert to embed and optimise security controls across CI/CD pipelines and environments.

You will coordinate remediation of vulnerabilities, strengthen deployment security and enhance risk management across non-production and production setups.

Qualifications

• Experience embedding security into CI/CD and DevSecOps practices (security first in delivery).
• Familiarity with pipeline platforms like Jenkins, GitHub Actions or GitLab CI.
• Knowledge of container security, Kubernetes hardening and cloud security best practices.

Responsibilities

• Implement and manage security controls within CI/CD pipelines.
• Integrate and maintain security scanning solutions (SAST/DAST/SCA) and container image scanning.
• Monitor, assess and coordinate remediation of vulnerabilities identified by scans.
• Ensure secure configuration of infrastructure, containers and deployment environments.
• Validate vendor software releases for security compliance before promotion across environments.
• Manage secrets, certificates and access controls used in delivery pipelines.
• Collaborate with vendors and stakeholders to resolve security vulnerabilities in delivered software components.
• Monitor security alerts and compliance deviations within operational environments.
• Support incident response activities and security investigations as needed.
• Drive automation to improve security, reliability, and delivery efficiency.
• Promote secure operational practices and timely communication of incidents and remediation.
• Contribute to dashboards and governance activities.

Skills

CI/CD security

Jenkins

GitHub Actions

GitLab CI

Container security

Kubernetes security

SAST

DAST

SCA

IAM & secrets management

Vulnerability management

Tools

Snyk

OWASP ZAP

SonarQube

Aqua Security

Job description

Who we are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.

As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next‑generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry‑first model which brings together the best of in‑house and 3rd party capability.

We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.

#VOIS #BeUnrivalled #CreateTheFuture

About this Role

We are seeking a DevSecOps Security Expert to embed, govern and optimise security controls across CI/CD pipelines and operational environments. This role is responsible for integrating security into software delivery processes, identifying and coordinating remediation of vulnerabilities, supporting secure deployment practices, and strengthening the security posture of infrastructure and applications. The successful candidate will collaborate with technical teams and vendors to ensure security compliance, operational resilience, and effective risk management across non‑production and operational environments.

What you’ll do

• Implement and manage security controls within CI/CD pipelines.
• Integrate and maintain security scanning solutions, including SAST, DAST, Software Composition Analysis (SCA), dependency scanning and container image scanning.
• Monitor, assess and coordinate remediation of vulnerabilities identified through security scans.
• Ensure secure configuration and hardening of infrastructure, containers and deployment environments.
• Validate vendor software releases for security compliance before promotion across environments.
• Manage secrets, certificates and access controls utilised within delivery pipelines.
• Collaborate with vendors and stakeholders to resolve security vulnerabilities in delivered software components.
• Monitor security alerts, threats and compliance deviations within operational environments.
• Support incident response activities and security investigations where required.
• Analyse the wider technical ecosystem to identify security gaps, dependencies and systemic risks.
• Drive automation initiatives to improve security, reliability, scalability and delivery efficiency.
• Promote secure operational practices and timely communication of security incidents, risks and remediation activities.
• Contribute to monitoring, reporting, dashboards and security governance activities.

Who you are

• Experience implementing CI/CD security practices and DevSecOps methodologies.
• Strong understanding of pipeline platforms such as Jenkins, GitHub Actions and GitLab CI.
• Knowledge of container and Kubernetes security principles.
• Experience working with security testing and scanning tools, including SAST, DAST, SCA and container security solutions.
• Understanding of Identity and Access Management (IAM), privileged access controls and secrets management.
• Knowledge of vulnerability management, remediation processes and patch governance.
• Familiarity with cloud security and infrastructure security best practices.
• Experience with security monitoring platforms and SIEM solutions.
• Strong understanding of security governance, risk management and compliance standards.
• Ability to interpret vulnerability findings, prioritise risk and coordinate remediation activities.
• Strong attention to detail and a proactive approach to identifying and mitigating risk.
• Effective collaboration, problem‑solving and stakeholder management skills.
• Ability to work in complex environments and support decision‑making with speed and accuracy.
• Commitment to innovation, continuous improvement and customer‑focused outcomes.
• Experience in automation, monitoring, alerting, deployment operations and performance engineering.

Not a perfect fit?

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

What's in it for you

• Opportunity to work on enterprise‑scale DevSecOps and cyber security programmes.
• Exposure to modern security tooling across CI/CD, cloud, container and Kubernetes environments.
• Opportunity to influence secure software delivery practices and operational security governance.
• Collaborative environment focused on innovation, automation and continuous improvement.
• Experience working with global stakeholders and technology partners across complex environments.
• Opportunity to contribute to security resilience, risk reduction and business‑critical transformation initiatives.

What skills you will learn

• Advanced DevSecOps implementation and pipeline security practices.
• Enterprise vulnerability management and remediation governance.
• Security automation across CI/CD and infrastructure environments.
• Container, Kubernetes and cloud security best practices.
• Security monitoring, incident support and operational risk assessment.
• Secure software delivery lifecycle management within large‑scale global environments.
• Governance, compliance and security reporting capabilities.
• Cross‑functional collaboration and stakeholder engagement within cyber security programmes.

VOIS Equal Opportunity Employer Commitment

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio‑economic background.

Join Us

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this. We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together. With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Follow us on social media

• LinkedIn: https://www.linkedin.com/company/vois/
• Facebook: https://www.facebook.com/voisglobal
• Instagram: https://www.instagram.com/voisglobal/
• You can also chat with our employees to learn more about our projects: https://lnkd.in/dpkrcvR2