DevSecOps Specialist | Jobs In India

DigitalXNode; Ahmedabad District; Remote; INR 1,200,000 - 1,700,000; Full time

Job summary

DigitalXnode is seeking an experienced DevSecOps Specialist to support security and engineering needs in India. The role requires hands-on work across software development security, cloud operations and governance.

This is a remote engagement with flexibility for full-time, part-time or contractual arrangements depending on project requirements. Responsibilities include integrating security testing into CI/CD, threat modelling, reviews, and hardening AWS/Azure/GCP and container environments.

Qualifications

• Any Graduate with relevant experience in information security, cybersecurity, DevSecOps or security engineering.
• A degree in Computer Science, Information Technology, Cybersecurity, Engineering or a related field will be an advantage.

Responsibilities

• Integrate automated security testing tools into CI/CD pipelines and development workflows.
• Conduct threat modelling, risk assessments and security architecture reviews.
• Perform code security reviews and vulnerability assessments across applications, APIs and cloud environments.
• Review configurations against security standards and compliance requirements.
• Assess and harden cloud environments across AWS, Azure and GCP.
• Review container environments including Docker and Kubernetes.
• Collaborate with engineering teams to analyse vulnerabilities and provide remediation guidance.
• Support security audits, gap assessments and compliance reviews.
• Promote secure development practices and a security-first culture.

Skills

DevSecOps

CI/CD security

Threat modelling

Security reviews

Cloud security

Container security

Vulnerability remediation

Security standards

Communication

Security tooling

Education

Any Graduate

CS / IT / Cybersecurity degree

Tools

Snyk

SonarQube

Checkmarx

Trivy

ZAP

Semgrep

GitHub Actions

GitLab CI

Jenkins

Terraform

CloudFormation

Docker

Kubernetes

Job description

Company Overview

DigitalXnode helps clients across industries connect with skilled and relevant talent for their technology and business requirements. We support hiring and staff augmentation needs by identifying professionals with the right expertise for a variety of projects and engagement models.

Job Summary

We are looking for experienced DevSecOps Specialists to support our client's information security and engineering requirements in India. The role requires hands-on experience across software development security, cloud operations and security governance. This is a remote opportunity, with full-time, part-time or contractual engagement depending on project requirements.

Key Responsibilities

• Integrate automated security testing tools into CI/CD pipelines and development workflows.
• Conduct threat modelling, risk assessments and security architecture reviews.
• Perform code security reviews, vulnerability assessments and end-to-end security evaluations across applications, APIs and cloud environments.
• Review application and infrastructure configurations against security standards and compliance requirements.
• Assess and harden cloud environments across AWS, Azure and GCP.
• Review container environments including Docker and Kubernetes.
• Work with engineering teams to analyse vulnerabilities and provide practical remediation recommendations.
• Support security audits, gap assessments and compliance reviews.
• Promote secure development practices and a security-first engineering culture.

Required Technical Skills

• 3+ years of relevant hands-on experience in DevSecOps, application security or security engineering.
• Experience integrating tools such as Snyk, SonarQube, Checkmarx, Trivy, ZAP or Semgrep into CI/CD pipelines.
• Previously worked with GitHub Actions, GitLab CI or Jenkins.
• Strong understanding of OWASP and secure coding principles.
• Hands-on experience with manual and automated source code reviews.
• Knowledge of network security, IAM, cryptography, endpoint security and incident response fundamentals.
• Experience identifying vulnerabilities and implementing or recommending fixes.
• Working knowledge of cloud-native and container security.

DevSecOps and CI/CD Security

• Understanding of SAST, DAST, SCA, IAST and container scanning.
• Ability to automate security checks within software delivery workflows.
• Experience reviewing security findings and supporting remediation.

Cloud and Infrastructure Security

• Experience securing workloads on AWS, Azure and/or GCP.
• Working knowledge of Terraform or CloudFormation.
• Experience with Docker, Kubernetes or containerised environments.
• Ability to review cloud and hosting configurations for security risks.

Compliance and Security Standards

• Familiarity with ISO 27001, NIST, CIS Benchmarks, SOC 2 and PCI-DSS.
• Understanding of OWASP Top 10.
• Experience conducting gap analyses, security reviews or compliance assessments.

Preferred Skills

• Experience using Cycode will be an added advantage.
• Scripting or programming skills in Python, Bash, Go or JavaScript.
• Ability to communicate security risks to technical and business stakeholders.

Required Skills

• Strong analytical and problem-solving abilities.
• Ability to investigate security issues and provide practical remediation guidance.
• Good written and verbal communication skills.
• Ability to collaborate with developers, DevOps teams and cloud engineers.

AI Experience

Not Mandatory. Experience using AI-assisted tools for security analysis, code review, vulnerability investigation, documentation or security automation can be considered as an advantage.

Managerial Experience

Not Mandatory. This would be an individual contributor role primarily. Formal team-handling experience is not required, although the candidate should be comfortable guiding engineering teams on security findings and remediation.

Operational Experience

• Experience working with software development and DevOps teams.
• Experience managing vulnerability remediation.
• Experience participating in security audits, assessments or compliance activities.
• Good with documentation as reference records.

Qualifications

• Any Graduate with relevant experience in information security, cybersecurity, DevSecOps or security engineering may be considered.
• A degree in Computer Science, Information Technology, Cybersecurity, Engineering or a related field will be an advantage.

Certifications

• CISSP, CISA, CEH, GWAPT, OSWE or CSSLP will be an advantage.
• AWS or Azure Security Specialty certifications will be beneficial.

Experience

3–6 years of relevant experience in DevSecOps, application security, cloud security or security engineering.

Explore more job opportunities at Job Openings