Security Lead (DevSecOps, AWS & Kubernetes Security)

Codians; Delhi; On-site; INR 3,200,000 - 5,200,000; Full time

Job summary

Codeguardian.ai is seeking a Security Lead to own DevSecOps and cloud security across AWS and Kubernetes. You will lead secure-by-default practices, design secure CI/CD pipelines, and mentor engineers while coordinating with cross-functional teams to uphold security posture.

The role demands 8–10 years of experience in security engineering and hands-on expertise in AWS, containers, and security tooling.

Qualifications

• 8-10 years of experience in security engineering, DevSecOps, or cloud security.
• Hands-on expertise in AWS, container security, and secure CI/CD pipelines.
• Experience leading security initiatives and cross-functional collaboration.

Responsibilities

• Lead design and implementation of GitLab CI security stages covering SAST, DAST, SCA, and vulnerability scanning.
• Define and oversee integration of SonarQube, OWASP ZAP, Trivy, Syft, and Grype into build and deployment pipelines.
• Drive software supply chain security, including SBOM generation and Cosign image signing.
• Set Kubernetes security standards using Kyverno, OPA/Gatekeeper, and Kubernetes RBAC.
• Own cloud security on AWS across IAM, KMS, Secrets Manager, Inspector, Security Hub, GuardDuty, CloudTrail, CloudWatch Logs, and ACM.
• Oversee secrets and certificate management, including HashiCorp Vault.
• Lead Linux and Docker hardening initiatives.
• Lead SIEM monitoring, VAPT coordination, and security remediation tracking through to closure.
• Ensure alignment with OWASP Top 10, ISO 27001 controls, and DPDP requirements.
• Partner with development, DevOps, infrastructure, and compliance teams to build secure-by-default practices.
• Mentor and guide security and DevOps engineers, and report security posture to stakeholders.

Skills

AWS

Docker

Kubernetes

SAST

DAST

SCA

Tools

SonarQube

OWASP ZAP

Trivy

Syft

Grype

Kyverno

OPA/Gatekeeper

HashiCorp Vault

Job description

Security Lead (DevSecOps, AWS & Kubernetes Security)

Codeguardian.ai

Contract In Office

Experience 8-10 years

Openings 1

Posted Sep 21, 2026

Skills AWS Docker Kubernetes SAST, DAST, SCA

Key Responsibilities

• Lead the design and implementation of GitLab CI security stages covering SAST, DAST, SCA, and vulnerability scanning
• Define and oversee the integration of SonarQube, OWASP ZAP, Trivy, Syft, and Grype into build and deployment pipelines
• Drive software supply chain security, including SBOM generation and Cosign image signing
• Set Kubernetes security standards using Kyverno, OPA/Gatekeeper, and Kubernetes RBAC
• Own cloud security on AWS across IAM, KMS, Secrets Manager, Inspector, Security Hub, GuardDuty, CloudTrail, CloudWatch Logs, and ACM
• Oversee secrets and certificate management, including HashiCorp Vault
• Lead Linux and Docker hardening initiatives
• Lead SIEM monitoring, VAPT coordination, and security remediation tracking through to closure
• Ensure alignment with OWASP Top 10, ISO 27001 controls, and DPDP requirements
• Partner with development, DevOps, infrastructure, and compliance teams to build secure-by-default practices
• Mentor and guide security and DevOps engineers, and report security posture to stakeholders