DevSecOps Specialist | Jobs In India

DigitalXNode

Ahmedabad District

On-site

INR 1,200,000 - 1,600,000

Full time

14 days+

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

DigitalXNode is seeking an experienced DevSecOps Specialist in India to support security requirements across software development and cloud environments. The role involves hands-on work in cloud security, secure coding, and threat modelling within CI/CD processes, with remote, full-time, part-time, or contractual engagements depending on project needs.

The ideal candidate will integrate security tools (Snyk, SonarQube, Checkmarx, Trivy, ZAP, Semgrep) into pipelines and collaborate with

Qualifications

3–6 years of relevant experience in DevSecOps, application security, cloud security or security engineering.
Experience integrating Snyk, SonarQube, Checkmarx, Trivy, ZAP or Semgrep into CI/CD pipelines.
Experience with GitHub Actions, GitLab CI or Jenkins.
Strong understanding of OWASP and secure coding principles.
Hands-on with code reviews (manual and automated).
Knowledge of network security, IAM, cryptography, endpoint security and incident response fundamentals.
Experience identifying vulnerabilities and recommending fixes.
Working knowledge of cloud-native and container security.

Responsibilities

Integrate automated security testing tools into CI/CD pipelines and development workflows.
Conduct threat modelling, risk assessments and security architecture reviews.
Perform code security reviews and end-to-end security evaluations across apps, APIs and cloud environments.
Review configurations against security standards and compliance requirements.
Assess and harden cloud environments across AWS, Azure and GCP.
Review Docker and Kubernetes container environments.
Work with engineering teams to analyse vulnerabilities and provide remediation guidance.
Support security audits, gap assessments and compliance reviews.
Promote secure development practices and a security-first culture.

Skills

DevSecOps

Application security

Security engineering

Secure coding

Threat modelling

Vulnerability assessment

Education

Any Graduate

Information Security/ Cybersecurity background

Tools

Snyk

SonarQube

Checkmarx

Trivy

ZAP

Semgrep

GitHub Actions

GitLab CI

Jenkins

Job description

Company Overview

DigitalXnode helps clients across industries connect with skilled and relevant talent for their technology and business requirements. We support hiring and staff augmentation needs by identifying professionals with the right expertise for a variety of projects and engagement models.

Company Overview

Job Summary

We are looking for experienced DevSecOps Specialists to support our client’s information security and engineering requirements in India. The role requires hands‑on experience across software development security, cloud operations and security governance. This is a remote opportunity, with full‑time, part‑time or contractual engagement depending on project requirements.

Key Responsibilities

Integrate automated security testing tools into CI/CD pipelines and development workflows.
Conduct threat modelling, risk assessments and security architecture reviews.
Perform code security reviews, vulnerability assessments and end‑to‑end security evaluations across applications, APIs and cloud environments.
Review application and infrastructure configurations against security standards and compliance requirements.
Assess and harden cloud environments across AWS, Azure and GCP.
Review container environments including Docker and Kubernetes.
Work with engineering teams to analyse vulnerabilities and provide practical remediation recommendations.
Support security audits, gap assessments and compliance reviews.
Promote secure development practices and a security‑first engineering culture.

Required Technical Skills

3+ years of relevant hands‑on experience in DevSecOps, application security or security engineering.
Experience integrating tools such as Snyk, SonarQube, Checkmarx, Trivy, ZAP or Semgrep into CI/CD pipelines.
Previously worked with GitHub Actions, GitLab CI or Jenkins.
Strong understanding of OWASP and secure coding principles.
Hands‑on experience with manual and automated source code reviews.
Knowledge of network security, IAM, cryptography, endpoint security and incident response fundamentals.
Experience identifying vulnerabilities and implementing or recommending fixes.
Working knowledge of cloud‑native and container security.

DevSecOps and CI/CD Security

Understanding of SAST, DAST, SCA, IAST and container scanning.
Ability to automate security checks within software delivery workflows.
Experience reviewing security findings and supporting remediation.

Cloud and Infrastructure Security

Experience securing workloads on AWS, Azure and/or GCP.
Working knowledge of Terraform or CloudFormation.
Experience with Docker, Kubernetes or containerised environments.
Ability to review cloud and hosting configurations for security risks.

Compliance and Security Standards

Familiarity with ISO 27001, NIST, CIS Benchmarks, SOC 2 and PCI‑DSS.
Understanding of OWASP Top 10.
Experience conducting gap analyses, security reviews or compliance assessments.

Preferred Skills

Experience using Cycode will be an added advantage.
Scripting or programming skills in Python, Bash, Go or JavaScript.
Ability to communicate security risks to technical and business stakeholders.

Required Skills

Strong analytical and problem‑solving abilities.
Ability to investigate security issues and provide practical remediation guidance.
Good written and verbal communication skills.
Ability to collaborate with developers, DevOps teams and cloud engineers.

AI Experience

Not Mandatory. Experience using AI‑assisted tools for security analysis, code review, vulnerability investigation, documentation or security automation can be considered as an advantage.

Managerial Experience

Not Mandatory. This would be an individual contributor role primarily. Formal team‑handling experience is not required, although the candidate should be comfortable guiding engineering teams on security findings and remediation.

Operational Experience

Experience working with software development and DevOps teams.
Experience managing vulnerability remediation.
Experience participating in security audits, assessments or compliance activities.
Good with documentation as reference records.

Qualifications

Any Graduate with relevant experience in information security, cybersecurity, DevSecOps or security engineering may be considered.
A degree in Computer Science, Information Technology, Cybersecurity, Engineering or a related field will be an advantage.

Certifications