Senior Cloud Security & DevSecOps Engineer

Persistent Systems Limited; Pune District; Hybrid; INR 3,000,000 - 4,200,000; Full time

Benefits offered by this job

Hybrid work model

Learning opportunities

Equal Opportunity Employer

Job summary

Persistent Systems Limited is seeking a Senior Cloud Security & DevSecOps Engineer to strengthen security across cloud-native and hybrid environments. The role emphasizes AWS Cloud Security, DevSecOps practices, vulnerability management, IAM, and secure-by-design principles across products.

You will design security controls, automate testing, and drive secure SDLC adoption while collaborating with DevOps, QA, and infrastructure teams in a hybrid work model.

Qualifications

• 8–12 years of experience in Cloud Security, DevSecOps, or related security domains.
• Strong hands-on experience with AWS Cloud Security services and architectures.
• Experience in vulnerability management, remediation, and security testing.

Responsibilities

• Design and implement AWS cloud security controls for cloud-native and hybrid environments.
• Establish and enforce cloud security best practices, standards, and governance frameworks.
• Secure cloud workloads, applications, data, and infrastructure using AWS-native security services.
• Integrate security controls into CI/CD pipelines and DevSecOps workflows.
• Automate security testing, vulnerability scanning, code analysis, and compliance validation.
• Collaborate with DevOps teams to build secure deployment pipelines.
• Monitor and respond to cloud security events using SIEM and AWS security services.

Skills

AWS Cloud Security

DevSecOps

CI/CD Security

IAM Management

KMS & PKI

Threat Modeling

Vulnerability Management

Security Monitoring

SSDLC

Tools

AWS CloudTrail

GuardDuty

Security Hub

SIEM

Job description

Senior Cloud Security & DevSecOps Engineer

Job Description

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what's next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

Our disruptor's mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We reported $1,654.4M FY26 revenue with 17.4% Y-o-Y growth. We have delivered 24 sequential quarters of growth with $436.0M in Q4 FY26 revenue, up 3.2% Q-o-Q and 16.2% Y-o-Y growth. Our 27,500+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries.

AboutPosition:

We are seeking a highly skilled Senior We are looking for a highly skilled Cloud Security & DevSecOps Engineer to strengthen the security posture of cloud-native and hybrid environments. The ideal candidate will have extensive experience in AWS Cloud Security, DevSecOps practices, vulnerability management, identity and access management, and security automation. This role will be responsible for integrating security across the software development lifecycle, ensuring compliance, managing cloud risks, and driving secure-by-design principles across products and platforms.

• Role: Senior Cloud Security & DevSecOps Engineer
• Location: All Persistent Locations
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

WhatYou'llDo:

• Design and implement AWS cloud security controls for cloud-native and hybrid environments.
• Establish and enforce cloud security best practices, standards, and governance frameworks.
• Secure cloud workloads, applications, data, and infrastructure using AWS-native security services.
• Implement encryption, key management, and access control mechanisms to protect critical assets.
• Integrate security controls into CI/CD pipelines and DevSecOps workflows.
• Automate security testing, vulnerability scanning, code analysis, and compliance validation.
• Implement security guardrails and policy enforcement across cloud deployments.
• Collaborate with DevOps teams to build secure and scalable deployment pipelines.
• Manage AWS IAM, Cognito, KMS, Security Groups, and PKI infrastructure.
• Implement least-privilege access models and role-based access controls.
• Secure authentication, authorization, and identity lifecycle management processes.
• Monitor and improve access governance across cloud environments.
• Conduct Threat and Risk Assessments (TRA) for applications, infrastructure, and cloud workloads.
• Identify security risks and recommend mitigation strategies.
• Perform secure architecture reviews and threat modeling exercises.
• Ensure adherence to security standards and compliance requirements.
• Analyze vulnerability assessment and scanning reports.
• Coordinate remediation efforts with development and operations teams.
• Conduct secure code reviews, security testing, and product security assessments.
• Promote secure coding practices and security awareness across engineering teams.
• Ensure compliance with OWASP, CIS Benchmarks, and secure development standards.
• Monitor cloud security events and investigate potential threats.
• Utilize AWS CloudTrail, GuardDuty, Security Hub, and SIEM solutions for continuous monitoring.
• Support incident response, root cause analysis, and remediation activities.
• Implement security monitoring and alerting frameworks to improve threat detection capabilities.
• Work closely with development, QA, DevOps, and infrastructure teams to embed security throughout the SDLC.
• Participate in security governance reviews and compliance assessments.
• Drive security best practices and continuous improvement initiatives.
• Stay updated with evolving cloud security threats, technologies, and industry standards.

ExpertiseYou'llBring:

• 8-12 years of experience in Cloud Security, Cyber Security, DevSecOps, or related security domains.
• Strong experience with AWS Cloud Security services and architectures.
• Hands-on expertise in DevSecOps, CI/CD security, and security automation.
• Experience managing IAM, Cognito, KMS, PKI, Security Groups, and access governance.
• Strong understanding of Threat & Risk Assessments (TRA) and security controls.
• Experience in vulnerability management, remediation, and security testing.
• Knowledge of cloud security monitoring, logging, and incident response processes.
• Proficiency with security tools, SIEM platforms, and vulnerability scanning solutions.
• Strong understanding of secure software development lifecycle (SSDLC) practices.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."