Lead DevOps Engineer

Oolka; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Oolka is seeking a DevSecOps professional in Bengaluru to integrate security across the software lifecycle and automate security in CI/CD pipelines. You will perform vulnerability assessments, manage IaC security with Terraform, and monitor incidents using SIEM/Grafana.

Collaboration with cross-functional teams and training on secure coding are part of the role. Applicants should have 4+ years in DevSecOps or related cybersecurity roles, with strong scripting and containerization skills (Python,

Qualifications

• Experience in a DevSecOps, DevOps, or related cybersecurity role (4+ years)

Responsibilities

• Integrate Security: Embed security testing, reviews, and best practices into all phases of the development lifecycle.
• Automate Security Processes: Design, implement, and maintain security automation tools within CI/CD pipelines to detect vulnerabilities early and efficiently.
• Conduct Assessments and Testing: Perform regular vulnerability assessments, threat modelling, and penetration testing on applications and infrastructure to identify weaknesses.
• Manage Infrastructure as Code (IaC) Security: Ensure secure configuration and management of cloud and on-premises infrastructure using IaC tools like Terraform or CloudFormation.
• Monitor and Respond to Incidents: Set up and manage security monitoring and observability solutions to detect and respond to security incidents in real-time.
• Ensure Compliance: Work with compliance teams to implement and enforce security policies and regulatory standards.
• Collaborate and Educate: Foster a security-aware culture by collaborating with cross-functional teams and providing guidance and training on secure coding practices and emerging threats.

Skills

DevSecOps

Security automation

Tools

Jenkins

GitLab CI

GitHub Actions

Docker

Kubernetes

Terraform

Python

Bash

Shell

Go

Job description

Responsibilities

• Integrate Security: Embed security testing, reviews, and best practices into all phases of the development lifecycle.
• Automate Security Processes: Design, implement, and maintain security automation tools (e. g., SAST, DAST, SCA, secrets scanning) within the CI/CD pipelines to detect vulnerabilities early and efficiently.
• Conduct Assessments and Testing: Perform regular vulnerability assessments, threat modelling, and penetration testing on applications and infrastructure to identify weaknesses. Mitigate risks.
• Manage Infrastructure as Code (IaC) Security: Ensure secure configuration and management of cloud and on-premises infrastructure using IaC tools like Terraform or CloudFormation.
• Monitor and Respond to Incidents: Set up and manage security monitoring and observability solutions (e. g., SIEM, ELK stack, Grafana) to detect and respond to security incidents in real-time.
• Ensure Compliance: Work with compliance teams to implement and enforce security policies and regulatory standards (e. g., GDPR, HIPAA, PCI-DSS, SOC 2).
• Collaborate and Educate: Foster a security-aware culture by collaborating with cross-functional teams and providing guidance and training on secure coding practices and emerging threats.

Requirements

• Experience: Proven experience in a DevSecOps, DevOps, or related cybersecurity role (typically 4+ years, more for senior positions).

Technical Proficiency

• CI/CD Tools: Jenkins, GitLab CI, GitHub Actions.
• Cloud Platforms: Deep understanding of security on AWS.
• Scripting/Programming: Proficiency in languages like Python, Bash, Shell, or Go for automation and custom tool development.
• IaC and Containerization: Experience with Docker, Kubernetes, and Terraform.