Senior DevOps & Cloud Security Engineer

Insurextech; Pune District; Presencial; INR 2.400.000 - 4.200.000; Jornada completa

Descripción de la vacante

Insurextech in Pune, India is seeking a security-focused DevOps & Cloud Security Engineer to manage, secure, automate, and continuously improve our cloud infrastructure, deployment pipelines, and application security posture.

The ideal candidate will have hands-on AWS infrastructure management, DevSecOps, CI/CD automation, infrastructure security, vulnerability management, penetration testing, and production monitoring.

Formación

• Hands-on experience in AWS infrastructure management, DevSecOps, CI/CD automation, infrastructure security, vulnerability management, penetration testing, and production monitoring.

Responsabilidades

• Design, provision, configure, and manage AWS infrastructure and production environments.

Conocimientos

AWS

DevSecOps

GitLab CI/CD

Linux servers

Vulnerability testing

Herramientas

Nessus

Burp Suite

Datadog

OWASP ZAP

Descripción del empleo

Job Title: Senior DevOps & Cloud Security Engineer (DevSecOps)
Experience: 5 - 8 Years (Relevant Hands-on Experience)
Location: Pune, India
Employment Type: Full-Time
Department: Engineering / Infrastructure & Security

About the Role

We are looking for an experienced and security-focused DevOps & Cloud Security Engineer to manage, secure, automate, and continuously improve our cloud infrastructure, deployment pipelines, and application security posture.

The ideal candidate will have strong hands-on expertise in AWS infrastructure management, DevSecOps, CI/CD automation, infrastructure security, vulnerability management, penetration testing, and production monitoring.

This role will be responsible for ensuring that our applications and infrastructure remain secure, highly available, scalable, cost-efficient, and compliant with industry security standards.

The candidate should be comfortable taking end-to-end ownership of infrastructure operations, security controls, production deployments, incident response, and continuous security improvements.

Key Responsibilities

1. AWS Cloud Infrastructure & Server Management

• Design, provision, configure, and manage AWS infrastructure and production environments.
• Set up and manage AWS services including:
  • EC2, VPC, Security Groups, IAM, and networking.
  • RDS (PostgreSQL, MySQL), automated backups, snapshots, and recovery.
  • Application Load Balancers (ALB), Network Load Balancers (NLB), and Auto Scaling.
  • S3, EBS, CloudFront, Route 53, and AWS Certificate Manager.
  • AWS Systems Manager, Secrets Manager, and KMS.
• Implement automated server backups, database backups, retention policies, and disaster recovery procedures.
• Regularly test backup restoration and recovery readiness.
• Manage Linux-based servers, particularly Ubuntu.
• Perform server upgrades, OS migrations, patch management, and infrastructure optimization.
• Ensure high availability, scalability, and minimal downtime during infrastructure changes.
• Monitor and optimize AWS infrastructure costs.

2. CI/CD Pipeline Management & DevSecOps

• Design, implement, maintain, and optimize GitLab CI/CD pipelines across multiple application stacks: Ruby on Rails, Node.js, Python, React.js, Vue.js / TypeScript
• Automate application builds, testing, deployments, and rollback processes.
• Integrate automated security checks into CI/CD pipelines, including:
  • SAST (Static Application Security Testing).
  • DAST (Dynamic Application Security Testing).
  • Software Composition Analysis (SCA) and dependency vulnerability scanning.
  • Secrets detection and credential scanning.
  • Container image scanning.
  • Infrastructure as Code (IaC) security scanning.
• Configure quality gates to prevent vulnerable or non-compliant code from reaching production.
• Implement secure GitLab Runner configurations, protected branches, deployment approvals, and secure secrets management.
• Work with engineering teams to identify and remediate security vulnerabilities early in the development lifecycle.
• Develop standardized, reusable CI/CD templates across technology stacks.

3. Infrastructure Security & Server Hardening

• Implement and maintain security best practices across AWS infrastructure and Linux servers.
• Perform server hardening, including:
  • SSH access restrictions and secure authentication.
  • Firewall configuration and network access controls.
  • Removal of unnecessary services and open ports.
  • OS-level security configuration and baseline hardening.
  • Secure user permissions and privilege management.
  • Endpoint protection and malware detection.
• Configure and maintain AWS security controls including:
  • IAM policies, roles, and least-privilege access.
  • AWS GuardDuty.
  • AWS Security Hub.
  • AWS Config.
  • AWS CloudTrail.
  • AWS WAF.
  • VPC Flow Logs.
  • AWS Inspector.
• Manage SSL/TLS certificates, encryption at rest and in transit, and secure key management.
• Conduct periodic infrastructure security reviews and identify configuration weaknesses.
• Implement network segmentation, secure access mechanisms, and protection against unauthorized access.
• Ensure sensitive credentials, application secrets, and customer information are securely managed.

4. Vulnerability Assessment, Penetration Testing & Red Teaming

• Plan, coordinate, and conduct regular Vulnerability Assessment and Penetration Testing (VA/PT) activities across applications, APIs, servers, and cloud infrastructure.
• Demonstrate hands-on experience with:
  • Web application and API penetration testing.
  • Infrastructure and network vulnerability assessments.
  • AWS cloud security assessments.
  • Red teaming and adversarial security testing.
  • Security misconfiguration identification.
• Use industry-standard security tools such as OWASP ZAP, Burp Suite, Nmap, Nessus, OpenVAS/Greenbone, and similar tools.
• Identify, prioritize, document, and remediate vulnerabilities based on severity and business impact.
• Collaborate with development teams to resolve application security vulnerabilities.
• Conduct remediation validation and security retesting.
• Manage external penetration testing vendors and coordinate security assessments when required.
• Maintain vulnerability registers, remediation tracking, and security assessment reports.
• Ensure security testing follows OWASP guidelines and recognized security frameworks.

5. Monitoring, Telemetry & Incident Management

• Implement and manage comprehensive infrastructure and application observability using:
  • AWS CloudWatch.
  • Datadog.
  • Sentry.
  • AWS GuardDuty.
  • AWS CloudTrail.
  • AWS Security Hub.
• Configure monitoring for:
  • CPU, memory, disk, and network utilization.
  • Application exceptions and error rates.
  • API response times and performance bottlenecks.
  • Database performance and connection health.
  • Server availability and uptime.
  • Suspicious activities and potential security threats.
• Set up centralized logging, dashboards, alerting, and actionable notifications.
• Configure proactive alerts through email, SMS, webhooks, and collaboration tools.
• Investigate production incidents, infrastructure failures, and security events.
• Perform root cause analysis (RCA) and implement preventive measures.
• Improve incident detection, response times, and system reliability.
• Maintain incident response procedures and operational runbooks.

6. Patch Management, CVE Monitoring & Security Updates

• Continuously monitor emerging vulnerabilities and Common Vulnerabilities and Exposures (CVEs) relevant to deployed infrastructure and application technology stacks.
• Track security advisories for Ubuntu/Linux, AWS services, Nginx/Apache, Ruby, Rails, Node.js, Python, and application dependencies.
• Assess vulnerability severity, exploitability, and potential business impact.
• Plan and execute timely security patches, server upgrades, and dependency updates.
• Maintain patching schedules and documented change management procedures.
• Test patches in non-production environments before production rollout.
• Implement emergency patching processes for critical and actively exploited vulnerabilities.
• Maintain infrastructure and software inventory to identify affected systems quickly.
• Verify successful remediation through rescanning and validation.

7. Compliance, Documentation & Security Governance

• Support implementation and maintenance of security controls aligned with SOC 2, ISO 27001, CIS Benchmarks, and OWASP best practices.
• Maintain infrastructure security policies, access controls, and audit trails.
• Prepare and maintain evidence required for internal and external security audits.
• Conduct periodic IAM access reviews and security configuration assessments.
• Implement secure change management, deployment approvals, and rollback procedures.
• Maintain infrastructure architecture diagrams, SOPs, disaster recovery plans, and security documentation.
• Support business continuity planning and disaster recovery testing.

Required Skills & Qualifications

Technical Skills

• 47 years of hands-on experience in DevOps, AWS infrastructure management, cloud security, or DevSecOps.
• Strong expertise in AWS infrastructure provisioning, configuration, security, and troubleshooting.
• Proven experience managing production Linux servers and implementing server hardening.
• Strong experience with GitLab CI/CD, including pipeline automation and integrated security testing.
• Experience supporting Ruby on Rails, Node.js, Python, React, and Vue-based applications.
• Hands-on experience with Docker, container security, and containerized deployments.
• Strong understanding of AWS IAM, VPC networking, Security Groups, WAF, encryption, and security policies.
• Practical experience with Sentry, Datadog, AWS CloudWatch, GuardDuty, and other security monitoring solutions.
• Experience with PostgreSQL/MySQL RDS administration, backups, performance monitoring, and recovery.
• Demonstrated expertise in vulnerability assessments, penetration testing, and infrastructure security audits.
• Experience with CVE monitoring, patch management, and remediation.
• Strong scripting skills in Bash, Python, or similar languages.
• Familiarity with Git, infrastructure automation, and deployment strategies.
• Strong troubleshooting, incident response, and root cause analysis capabilities.

Preferred / Good-to-Have Skills

• Experience with Terraform, Ansible, or AWS CloudFormation.
• Experience with Kubernetes, ECS, or container orchestration.
• Familiarity with Cloudflare WAF and third-party WAF solutions.
• Experience implementing security tools such as Trivy, Semgrep, SonarQube, GitLab Security Scanners, or Checkov.
• Experience with SIEM platforms and centralized security event management.
• Knowledge of SOC 2 compliance requirements and audit evidence management.
• Experience with high-availability architectures, disaster recovery, and zero-downtime deployments.
• Familiarity with AWS cost optimization and FinOps practices.
• Relevant certifications such as AWS Certified Solutions Architect, AWS Security Specialty, AWS DevOps Engineer Professional, OSCP, CEH, or CompTIA Security+.

Key Performance Indicators (KPIs)

The candidate will be evaluated on:

• Infrastructure Availability: Maintaining high production uptime and reliability.
• Security Posture: Reduction in critical and high-severity security vulnerabilities.
• Patch Compliance: Timely remediation of critical CVEs and security patches.
• CI/CD Efficiency: Deployment reliability, automation coverage, and reduced manual intervention.
• Incident Response: Faster detection, resolution, and prevention of recurring incidents.