DevSecOps Security Engineer

Ford Motor; Chennai; Presencial; INR 1.200.000 - 2.400.000; Jornada completa

Descripción de la vacante

Ford Motor is seeking a DevSecOps Security Engineer to ensure SDLC security best practices. You will guide teams in secure coding, drive security testing across pipelines, and help triage vulnerabilities with remediation timelines.

Collaborate with cross-functional teams and stay updated on security trends to continuously improve processes. Responsibilities include integrating security tools into CI/CD (Tekton, Cloud Build, GitHub Actions), defining DevSecOps security requirements, and providing

Formación

• Bachelor degree or equivalent in CS/Cybersecurity/SE.
• Minimum 3 years in at least 2 technical disciplines: app security, cloud security, vulnerability management, secure dev, identity management.
• Preferred: Cybersecurity/DevSecOps certifications.
• Willingness to work in flexible timings for global customers.

Responsabilidades

• Lead security testing across SDLC (SCA, SAST, DAST, IaC, Container Scanning).
• Assist teams in triaging and remediation of vulnerabilities.
• Integrate security tools into CI/CD pipelines (Tekton, Cloud Build, Github Actions).
• Define security requirements from a DevSecOps perspective and publish them.
• Prioritize vulnerabilities with remediation timelines and monitor trends.
• Collaborate with cross-functional teams to enforce security best practices.
• Provide security training and guidance on secure coding and awareness.

Conocimientos

Security testing

Vulnerability remediation

CI/CD integration

Scripting languages

DevOps tools

AI tooling

Networking basics

Agile processes

Communication skills

Educación

Bachelor's degree in Computer Science / Cybersecurity / Software Engineering

Herramientas

Golang

Shell scripting

Python

YAML

Git

CI/CD tooling

IaC tooling

Descripción del empleo

DevSecOps Security Engineer

The DevSecOps Security engineer ensures that every step of the software development lifecycle (SDLC) follows security best practices. They are also responsible for guiding the teams to adhere to secure coding principles and aid in testing the application against security risks/parameters before release. Drive the implementation of security testing (Secrets Scanning/ SAST / DAST / SCA/IAC/Container Scanning/ AI Security) Assist teams in triaging and addressing application security vulnerabilities. Support integration of security tools into CI / CD pipelines. (Tekton, Cloud Build, Github actions etc.) Define and publish security requirements from a DevSecOps perspective. Prioritizing vulnerabilities discovered along with recommending remediation timeline. Collaborate with cross-functional teams to ensure security best practices are followed throughout the software development lifecycle. Monitoring and analyzing vulnerability trends to identify focused actions like training, bulk fix, etc. Stay up to date with the latest security trends and technologies to continuously improve security processes Provide security training and guidance to development teams on secure coding practices and security awareness.

Qualifications required:

• Bachelor (undergraduate) degree in a relevant field (Computer Science, Cybersecurity, Software Engineering, or others) OR an equivalent combination of education, training, and experience.
• Minimum of 3 years of professional experience with any combination of at least 2 technical disciplines, including the following: application security, cloud security, vulnerability management, secure development methodologies, identity management.
• Preferred - Cybersecurity / DevSecOps certifications
• Willingness to work in flexible timings to support global customers / collaboration.

Skillset required:

• Experience in security testing (SCA, SAST, DAST, Container Scanning, IaC, etc), and their integration into CI/CD.
• Provide technical expertise in fixing the vulnerabilities. (e.g. Knowledge of OWASP Top 10).
• Excellent communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.
• Experience in integrating, monitoring and improving DevSecOps tools and processes, automate routine tasks and improve system reliability.
• Experience in writing scripts in languages such as Golang, Shell Script, Python, YAML etc.
• Experience in DevOps related tools, pipelines, platforms, registries and version control systems.
• Power-user of AI tools to boost productivity and quality of DevSecOps processes.
• Basic understanding of network and web related protocols (such as TCP/IP, UDP, HTTP, HTTPS, protocols)
• Good knowledge of Agile processes (planning/standups/retros etc.) and interact with cross functional teams.

Experience Level Mid Level