Full Stack DevSecOps Security Engineer

Ford Motor; Chennai; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Ford Motor is seeking a DevSecOps Full Stack Security Engineer to design, build, and operate security products across front-end, APIs, data layers, and cloud components. The role focuses on secure coding, Zero Trust integration, and automated security workflows using AI/ML where appropriate.

You will work with security, product delivery, DevSecOps, and platform engineering to translate roadmaps into scalable engineering solutions and robust CI/CD pipelines.

Qualifications

• Bachelor's degree or equivalent in CS or related field.
• 4+ years of full-stack software engineering with cloud-native apps or DevSecOps.
• Proficiency in front-end tech (Angular, React, TypeScript) and back-end (Java/Spring Boot or Python).
• Experience designing APIs, web services, and data-driven apps.
• Hands-on with CI/CD and DevOps tools: GitHub, Actions, Tekton, Cloud Build, Docker, Terraform.
• Cloud platform experience; GCP preferred, Azure/AWS also applicable.
• Secure SDLC, secure coding, vulnerability management, and CI/CD security integration.
• Familiarity with IaC, containers, and cloud-native delivery.
• Strong communication across security, product, and engineering teams.

Responsibilities

• Design, build, test, deploy, and maintain full-stack security products and APIs.
• Apply AI/ML to automate security workflows and risk scoring.
• Develop secure, maintainable code following best practices.
• Participate in architecture design and reviews with Zero Trust and DevSecOps controls.
• Collaborate to translate roadmaps and security needs into technical deliverables.
• Build CI/CD pipelines with Tekton, GitHub Actions, and Google Cloud Build.
• Integrate security scanning into pipelines and environments.
• Troubleshoot and optimize performance, security, and reliability.
• Document designs, APIs, deployment guidance, and runbooks.
• Apply Agile practices and continuously learn new tools and techniques.

Skills

Full-stack eng

DevSecOps

CI/CD

Angular/React/TypeScript

Java/Spring Boot

Python

GCP

AWS/Azure

Security basics

APIs

Education

Bachelor's in CS or related

Tools

GitHub Actions

Tekton

Docker

Terraform

Cloud Build

Kubernetes

BigQuery

PostgreSQL

Job description

DevSecOps Full Stack Security Engineer

The Full Stack DevSecOps Engineer is responsible for designing, engineering, and delivering security products and platforms from concept through production. The role develops end-to-end solutions spanning front-end applications, back-end services, application programming interfaces (APIs), data pipelines, databases, and cloud infrastructure. The engineer will apply AI and machine learning (AI/ML), where appropriate, to create intelligent automation for security use cases such as vulnerability triage, risk scoring, anomaly detection, and self-service security workflows. The role also embeds secure development practices, Zero Trust principles, and DevSecOps controls throughout the software development lifecycle (SDLC). Working closely with security, product delivery, DevSecOps, and platform engineering teams, this individual will translate security needs and product roadmaps into scalable, reliable, and maintainable engineering solutions.

Responsibilities

• Design, build, test, deploy, and maintain full-stack security products, including user interfaces, APIs, web services, data layers, and cloud-based components.
• Apply AI/ML and AI-assisted technologies, where appropriate, to automate security processes and improve areas such as vulnerability triage, risk assessment, anomaly detection, and self-service security workflows.
• Develop clean, secure, well-tested, maintainable code following secure coding principles and software engineering best practices.
• Participate in solution architecture, design, and code reviews, ensuring Zero Trust principles and DevSecOps controls are incorporated into product design and implementation.
• Collaborate with security, DevSecOps, product delivery, and platform engineering teams to translate product roadmaps and security requirements into technical deliverables.
• Design and implement continuous integration and continuous delivery (CI/CD) pipelines using technologies such as Tekton, GitHub Actions, and Google Cloud Build.
• Integrate security scanning and other security controls into software development and deployment pipelines.
• Troubleshoot, debug, and optimize applications to improve performance, scalability, security, reliability, and maintainability.
• Use AI-assisted development tools to improve engineering productivity and code quality while following organizational security and responsible-use standards.
• Evaluate and prototype relevant emerging technologies across AI, cloud-native engineering, DevSecOps, and cybersecurity.
• Develop and maintain technical documentation, including solution designs, API documentation, deployment guidance, and operational runbooks.
• Apply Agile development practices, including sprint planning, daily stand-ups, backlog refinement, and retrospectives.
• Demonstrate curiosity and continuous learning by evaluating new tools, frameworks, engineering practices, and opportunities to apply AI to security and software engineering challenges.

Required

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related field, or an equivalent combination of education, training, and relevant professional experience .
• Minimum of 4 years of full-stack software engineering experience , preferably developing cloud-native applications, security products, developer platforms, or DevSecOps solutions.
• Proficiency in modern front-end technologies such as Angular, React, and TypeScript , with hands-on experience in one or more back-end technologies such as Java/Spring Boot or Python .
• Experience designing and developing APIs, web services, and data-driven applications.
• Experience with relational or cloud-based data technologies such as PostgreSQL and Google BigQuery .
• Hands-on experience with CI/CD and DevOps technologies such as GitHub, GitHub Actions, Tekton, Google Cloud Build, Docker, Artifactory, and Terraform , or comparable technologies.
• Experience with a major cloud platform.
• Experience with Google Cloud Platform (GCP) services such as Cloud Run, Google Kubernetes Engine (GKE), and BigQuery is preferred; relevant experience with Microsoft Azure or Amazon Web Services (AWS) is also applicable.
• Understanding of secure software development practices, including secure coding, vulnerability management, application security, and integrating security scanning into CI/CD workflows.
• Familiarity with infrastructure as code (IaC), containerization, and cloud-native application delivery.
• Excellent verbal and written communication skills, with the ability to explain technical concepts to different audiences and collaborate across security, product, and engineering teams.

Preferred

• Experience developing security products, security automation, or self-service security platforms.
• Experience applying AI/ML, large language models (LLMs), or AI-enabled APIs to software engineering or cybersecurity use cases.
• Experience with vulnerability management, vulnerability prioritization, risk scoring, or anomaly detection.
• Working knowledge of Zero Trust architecture and DevSecOps principles.
• Experience with Kubernetes or managed Kubernetes platforms such as GKE.
• Familiarity with AI-assisted development tools and modern software engineering productivity tools.

#LI-MF2