Senior DevSecOps Engineer Security and Compliance

Remunance Systems; Pune District; On-site; INR 4,000,000 - 5,600,000; Full time

Job summary

Remunance Systems is seeking a senior security engineering leader to own the platform's security posture. You will drive SOC 2 readiness, CSA CAIQ Lite, and remediation of AWS security findings across multi‑account environments.

Responsibilities include closing Well-Architected findings, hardening IAM and network controls, managing secrets, and building DR and incident response plans. Excellent English required for coordinating with US leadership and auditors.

Qualifications

• 12-15 years in DevOps, cloud infrastructure or security engineering.
• Has led SaaS security audits including SOC 2 Type 1 and Type 2 remediation.
• Hands-on CSA CAIQ / CAIQ Lite experience.
• Experience with AWS Well-Architected Framework reviews and fixes.
• Deep AWS security knowledge: IAM, GuardDuty, Security Hub, KMS, WAF.
• Strong Kubernetes security (EKS) and IaC with Terraform.
• CI/CD security tooling: SAST, SCA, image/secrets scanning.
• Excellent written and spoken English for US leadership and auditors.
• Certifications: AWS Certified Security – Specialty, CISSP, CCSP or CKS.

Responsibilities

• Lead SOC 2 Type 1 readiness and Type 2 observation end to end.
• Complete CSA CAIQ Lite and respond to customer security questionnaires.
• Close AWS Well-Architected security findings across accounts.
• Harden multi-account AWS setup with least-privilege IAM and short-lived credentials.
• Own secrets rotation, vulnerability management, and patch cadence.
• Build backup, DR processes with defined RTO/RPO.
• Write the security incident response plan and coordinate external tests.
• Automate compliance evidence in CI/CD with policy-as-code and IaC scanning.
• Mentor Pune engineering team on secure engineering practices.

Skills

SOC 2 Type 1 readiness

SOC 2 Type 2 audits

CSA CAIQ Lite

AWS security

Kubernetes security (EKS)

IAM least-privilege

Threat modeling

CI/CD security tooling

Encryption & Secrets management

Incident response planning

Tools

Terraform

Sysdig

Drata

Vanta

Snyk / SCA tools

Job description

About the role
Company builds IIoT SaaS products (True Connect, True Factory, True Calibration) running on AWS for enterprise customers. You will own the security posture of this platform and lead it through SOC 2 Type 1 and Type 2 audits, CSA CAIQ Lite, and remediation of our AWS Well-Architected Framework (WAF) security and reliability findings. This is a hands-on senior role: you design the controls, build them in AWS, and produce the evidence auditors need.

What you'll do

• Lead SOC 2 Type 1 readiness and the Type 2 observation period end to end: gap assessment, control design, evidence collection, and working with the audit firm.
  
• Complete and maintain the CSA CAIQ Lite and answer customer security questionnaires.
  
• Close AWS Well-Architected security findings: GuardDuty, Security Hub, CloudTrail and Config in every account, root MFA, EBS encryption, S3 public-access blocks, WAF and service-to-service network policies.
  
• Harden our multi-account AWS setup (EKS, RDS/PostgreSQL, MongoDB, Kafka) with least-privilege IAM, SSO and short-lived credentials.
  
• Own secrets and key rotation, vulnerability management, patching cadence and container/runtime security (Sysdig).
  
• Build backup, restore-testing and disaster recovery processes with defined RTO/RPO.
  
• Write the security incident response plan and run external penetration tests to closure.
  
• Automate compliance evidence in CI/CD (policy-as-code, IaC scanning) and set up a compliance platform such as Vanta or Drata.
  
• Mentor the Pune engineering team on secure engineering practices.
  

Must have

• 1215 years in DevOps, cloud infrastructure or security engineering, with at least 5 years in DevSecOps.
  
• Has personally taken a SaaS company through SOC 2 Type 1 and Type 2 audits, including the remediation work.
  
• Hands-on experience completing CSA CAIQ / CAIQ Lite.
  
• Has run an AWS Well-Architected Framework review and fixed its security and reliability findings.
  
• Deep AWS security knowledge: IAM, Organizations/Control Tower, GuardDuty, Security Hub, CloudTrail, Config, KMS, Secrets Manager, WAF, VPC design.
  
• Strong Kubernetes (EKS) and container security; Terraform or similar IaC.
  
• CI/CD security tooling: SAST, SCA, image scanning, secrets scanning.
  
• Clear written and spoken English for working with US leadership, auditors and customers.
  
• Certifications: AWS Certified Security – Specialty, CISSP, CCSP or CKS.
  

Nice to have

• ISO 27001 or CSA STAR Level 2 experience.
  
• IoT/IIoT security background (device identity, MQTT, edge gateways).
  
• Experience with Vanta, Drata or Secureframe.
  
• Prior experience working with a US-headquartered product company.