DevSecOps Security Engineer

Ford; Chennai District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Ford is seeking a DevSecOps Security Engineer to ensure SDLC security across teams. You will drive testing, triage vulnerabilities, and integrate security into CI/CD pipelines using Tekton, Cloud Build and GitHub Actions.

You will publish security requirements, prioritize findings, and collaborate with cross-functional teams to maintain secure coding practices and continuous improvement in security posture.

Qualifications

• Bachelor's degree or equivalent in CS/Cybersecurity or related field.
• Minimum 3 years of professional experience with multiple technical disciplines in security.
• Cybersecurity / DevSecOps certifications preferred.
• Willingness to work in flexible timings for global customers.

Responsibilities

• Drive security testing implementation (SAST/DAST/SCA/IaC/Container).
• Assist triage and remediation of application security vulnerabilities.
• Support security tool integration into CI/CD pipelines (Tekton, Cloud Build, GitHub Actions).
• Define and publish security requirements from a DevSecOps perspective.
• Prioritize vulnerabilities and recommend remediation timelines.
• Collaborate with cross-functional teams to enforce SDLC security practices.
• Monitor vulnerability trends and plan focused training or bulk fixes.
• Stay updated on latest security trends to improve processes.
• Provide security training and guidance to development teams.

Skills

Security testing

DevSecOps integration

Vulnerability remediation

CI/CD automation

Python scripting

Golang

GitHub Actions

Tekton

Cloud Build

OWASP Top10 knowledge

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

Tekton

Cloud Build

GitHub Actions

Terraform

Container Scanning tools

Job description

The DevSecOps Security engineer ensures that every step of the software development lifecycle (SDLC) follows security best practices. They are also responsible for guiding the teams to adhere to secure coding principles and aid in testing the application against security risks/parameters before release.

• Drive the implementation of security testing (Secrets Scanning/ SAST / DAST / SCA/IAC/Container Scanning/ AI Security)
• Assist teams in triaging and addressing application security vulnerabilities.
• Support integration of security tools into CI / CD pipelines. (Tekton, Cloud Build, Github actions etc.)
• Define and publish security requirements from a DevSecOps perspective.
• Prioritizing vulnerabilities discovered along with recommending remediation timeline.
• Collaborate with cross-functional teams to ensure security best practices are followed throughout the software development lifecycle.
• Monitoring and analyzing vulnerability trends to identify focused actions like training, bulk fix, etc.
• Stay up to date with the latest security trends and technologies to continuously improve security processes
• Provide security training and guidance to development teams on secure coding practices and security awareness

Qualifications required:

• Bachelor (undergraduate) degree in a relevant field (Computer Science, Cybersecurity, Software Engineering, or others) OR an equivalent combination of education, training, and experience.
• Minimum of 3 years of professional experience with any combination of at least 2 technical disciplines, including the following: application security, cloud security, vulnerability management, secure development methodologies, identity management.
• Preferred - Cybersecurity / DevSecOps certifications
• Willingness to work in flexible timings to support global customers / collaboration.

Skillset required:

• Experience in security testing (SCA, SAST, DAST, Container Scanning, IaC, etc), and their integration into CI/CD.
• Provide technical expertise in fixing the vulnerabilities. (e.g. Knowledge of OWASP Top 10).
• Excellent communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.
• Experience in integrating, monitoring and improving DevSecOps tools and processes, automate routine tasks and improve system reliability.
• Experience in writing scripts in languages such as Golang, Shell Script, Python, YAML etc.
• Experience in DevOps related tools, pipelines, platforms, registries and version control systems.
• Power-user of AI tools to boost productivity and quality of DevSecOps processes.
• Basic understanding of network and web related protocols (such as TCP/IP, UDP, HTTP, HTTPS, protocols)
• Good knowledge of Agile processes (planning/standups/retros etc.) and interact with cross functional teams.