Senior Devops Engineer

Nxtwave Disruptive Technologies(Hiring for a Client); Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Nxtwave Disruptive Technologies is hiring for a client to lead DevSecOps initiatives in Bengaluru. The role focuses on integrating security into the SDLC, securing CI/CD pipelines, and managing cloud and container security for high-traffic systems.

You will implement and monitor security controls, drive compliance programs, and collaborate with engineering to embed secure coding practices across teams.

Qualifications

• 5+ years in DevSecOps or security-focused DevOps roles.
• Production security experience with real user data.
• AWS IAM, Security Groups, KMS, Secrets Manager experience.
• Hands-on with security scanning in CI/CD pipelines, not just pipelines.
• Experience enabling ISO 27001, SOC 2, or PCI-DSS compliance.
• Supports high-load systems (≥5,000 concurrent requests).
• Familiarity with real-time/event-driven systems and security.
• Proficiency with Jenkins, GitLab CI or GitHub Actions.
• Programming/scripting: Python, Bash, Shell, or Go.

Responsibilities

• Integrate security into all stages of the SDLC.
• Automate security testing and reviews in CI/CD pipelines.
• Identify, prioritize, and remediate production vulnerabilities.
• Secure AWS infrastructure with IAM, KMS, and Secrets Manager.
• Enforce IaC security for Terraform or CloudFormation.
• Secure containers with Docker and Kubernetes.
• Monitor and respond to security incidents using ELK, Grafana, and SIEM.
• Drive ISO 27001, SOC 2, PCI-DSS programs and governance.
• Collaborate with engineering to promote secure coding practices.
• Leverage AI/ML security tools for threat detection.

Skills

DevSecOps

AWS Security

CI/CD Security

Vulnerability Mgmt

IAM & KMS

Secrets Manager

Terraform

CloudFormation

Docker

Kubernetes

SAST/DAST/SCA

CI/CD Tools

Jenkins

GitLab CI

GitHub Actions

Python

Bash

Go

Terraform

OWASP ZAP

Snyk

HashiCorp Vault

ELK Stack

Grafana

SIEM

ISO 27001

SOC 2

PCI-DSS

Threat Modeling

AI/ML Security

Tools

Jenkins

GitLab CI

GitHub Actions

Job description

Key Responsibilities

• DevSecOps Integration: Integrate security practices, testing, and reviews into all stages of the software development lifecycle.
• CI/CD Security Automation: Implement and maintain security scanning tools, including SAST, DAST, Software Composition Analysis (SCA), and secrets scanning, within CI/CD pipelines.
• Vulnerability Management: Conduct vulnerability assessments, threat modeling, and security testing. Identify, prioritize, and remediate vulnerabilities in production systems handling real user data.
• AWS Security: Secure AWS infrastructure by implementing and managing IAM policies, Security Groups, AWS KMS, Secrets Manager, and other relevant security controls.
• Infrastructure as Code Security: Implement security best practices for infrastructure provisioned using Terraform or AWS CloudFormation.
• Container Security: Secure containerized applications and orchestration environments using Docker and Kubernetes.
• Security Monitoring and Incident Response: Implement monitoring and observability solutions using tools such as ELK Stack, Grafana, and SIEM platforms to detect, investigate, and respond to security incidents.
• Compliance and Governance: Drive the implementation and successful completion of security compliance initiatives, including ISO 27001, SOC 2, or PCI-DSS.
• Security Collaboration: Collaborate with engineering and infrastructure teams to promote secure coding practices, mitigate emerging threats, and improve the organization's security posture.
• AI-Driven Security: Leverage AI/ML-based security tools and techniques for threat detection, anomaly identification, and risk assessment.

Mandatory Skills and Qualifications

• 5+ years of relevant experience in DevSecOps, DevOps with a strong security focus, or a related cybersecurity engineering role.
• Production Security: Proven hands-on experience identifying and fixing security vulnerabilities in live production systems handling real user data.
• AWS Security: Practical experience implementing and managing AWS IAM, Security Groups, KMS, and Secrets Manager.
• CI/CD Pipeline Security: Hands-on experience integrating and managing security scanning tools within CI/CD pipelines, rather than only building deployment pipelines.
• Security Compliance: Direct involvement in successfully implementing and preparing an organization for ISO 27001, SOC 2, or PCI-DSS compliance.
• High-Scale Systems: Experience supporting systems handling at least 5,000 concurrent requests.
• Real-Time and Asynchronous Systems: Experience securing or operating real-time applications, event-driven architectures, or asynchronous processing systems.
• CI/CD Tools: Experience with Jenkins, GitLab CI, or GitHub Actions.
• Scripting and Automation: Proficiency in Python, Bash, Shell, or Go.
• Infrastructure and Containers: Hands-on experience with Terraform or CloudFormation, Docker, and Kubernetes.
• Security Tools: Familiarity with tools such as SonarQube, Snyk, OWASP ZAP, HashiCorp Vault, or equivalent security scanning and secrets management solutions.
• AI/ML Security Tools: Experience using AI/ML-based tools for security monitoring, threat detection, or risk analysis.

Preferred Qualifications

• Experience building security automation frameworks and integrating security checks into developer workflows.
• Experience with cloud security monitoring, incident response, and vulnerability remediation at scale.
• Strong problem-solving, communication, and cross-functional collaboration skills.