SecOps Engineer

Onder Shipthis Technologies; Bengaluru; On-site; INR 700,000 - 1,100,000; Full time

Job summary

Onder Shipthis Technologies is seeking an associate-level SecOps Engineer to support security operations, vulnerability management, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role collaborates with the CTO/CISO and engineering teams to balance security and reliability across CI/CD.

Responsibilities span security operations, vulnerability management, governance, MDM, and cloud/DevOps tasks.

Qualifications

• 1–2 years of security operations experience.
• Basic scripting in Python or Bash.
• Exposure to AWS/GCP/Azure and Terraform is a plus.
• Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.

Responsibilities

• Monitor infrastructure, applications and security alerts; assist incident investigations.
• Review access controls and enforce least privilege across systems.
• Run vulnerability scans and coordinate remediation with engineering teams.
• Support ISO/IEC 27001, SOC 2, GDPR compliance and audits.
• Administer MDM and enforce endpoint security controls.
• Maintain CI/CD pipelines, cloud infra, monitoring and cost optimization.

Skills

Linux basics

Networking basics

Cloud computing

Troubleshooting

Attention to detail

Tools

Docker

Terraform

GitHub Actions

Cloudflare

Vulnerability scanners

AWS

Job description

Job Summary

We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.

Responsibilities

Security Operations

• Monitor infrastructure, application, and security alerts and assist with incident investigation.
• Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
• Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
• Track security issues and corrective actions through closure.

Vulnerability Management

• Run and review application and infrastructure vulnerability scans.
• Maintain a vulnerability register and coordinate remediation with engineering teams.
• Support VAPT and penetration-testing exercises and validate closure of findings.
• Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance & Governance

• Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
• Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
• Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
• Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM & Endpoint Security

• Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
• Maintain device inventory and monitor endpoint compliance.
• Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
• Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
• Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD & Cloud

• Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
• Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
• Automate repetitive deployment, infrastructure, security, and compliance tasks.
• Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
• Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.

Requirements

• Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
• Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
• Strong troubleshooting, ownership, attention to detail, and willingness to learn.

Qualifications

• 1-2 years of experience with strong fundamentals are welcome.
• Basic scripting knowledge in Python, Bash, or similar.
• Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
• Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.

We Welcome Candidates

• Who can join immediately

Female candidates returning to work after a career break are strongly encouraged.

Job Details

• Location: Bangalore
• Job Type: Full-time, Permanent
• Experience: 1-2 years
• Industry: Software Product