Sr. DevSecOps Engineer

2Base Technologies Pvt. Ltd.; Ernakulam; On-site; INR 2,600,000 - 5,000,000; Full time

Benefits offered by this job

Upskilling opportunities

Career growth

Job summary

Zoho is seeking a Senior DevSecOps Engineer to lead cybersecurity, infrastructure automation, and DevSecOps practices as the organization modernizes its engineering environment.

You will strengthen security posture, modernize pipelines, and guide the team toward a secure-by-design culture across AWS/Azure/GCP and on-prem setups.

Qualifications

• 6-10 years of experience in DevOps, Cloud, or Infra with security exposure.
• Hands-on with CI/CD tools (Jenkins, GitLab CI, GitHub Actions).
• Strong expertise in AWS/Azure/GCP with secure architecture focus.
• IaC experience using Terraform/Ansible or similar tools.
• Experience securing Docker and Kubernetes environments.
• Knowledge of security frameworks and monitoring tooling.

Responsibilities

• Define and enforce security standards across cloud and on-prem environments.
• Conduct risk assessments, vulnerability scans, and remediation planning.
• Architect and maintain secure CI/CD pipelines with compliance gates.
• Lead secure-by-design culture and mentor DevOps engineers.
• Design secure cloud architectures for scalable deployments on AWS/Azure/GCP.
• Build and secure containerized environments with Docker and Kubernetes.
• Implement monitoring, logging, and SIEM for infra and apps.
• Collaborate with BA/PM/Engineering to align security with goals.

Skills

DevSecOps

Cloud security

CI/CD

Terraform

Docker

Kubernetes

AWS/Azure/GCP

Security monitoring

Networking

SIEM

Education

Bachelors in IT/CS

Diploma / B.Tech

MCA

Tools

GitHub Actions

Jenkins

Prometheus

Grafana

Job description

We are looking for a Senior DevSecOps Engineer who will lead our cybersecurity, infrastructure automation, and DevSecOps practices as we transition into a secure, scalable, and modern engineering environment. This role is responsible for strengthening 2Base’s security posture, modernizing our pipelines, and guiding the team towards a secure-by-design culture. You will work closely with engineering, product, and leadership teams to ensure that our systems, applications, and cloud environments are secure, reliable, and future-ready.

Key Responsibilities

• Define, implement, and enforce security standards, policies, and best practices across cloud and on-prem environments.
• Conduct security risk assessments, perform vulnerability scans, coordinate penetration testing activities, and execute mitigation plans.
• Architect, maintain, and enhance secure CI/CD pipelines with automated compliance and governance checkpoints.
• Promote and uphold a strong “Security First” culture across engineering, ensuring secure design and development practices
• Continuously monitor, detect, investigate, and respond to security threats, incidents, breaches, and anomalies.
• Develop, own, and mature Infrastructure-as-Code practices using Terraform, Ansible, and other automation frameworks.
• Design and lead secure cloud architectures across AWS, Azure, or GCP to support scalable and compliant deployments.
• Build, operate, and secure containerized environments using Docker and Kubernetes with enforced security baselines.
• Implement and maintain secure monitoring, logging, SIEM, and alerting systems for infrastructure and application layers.
• Improve and optimize system reliability, scalability, performance, and fault tolerance across all critical workloads.
• Mentor, guide, and upskill DevOps engineers in secure development, automation, and operational excellence.
• Lead technical strategy, decision-making, tool selection, process improvements, and DevSecOps roadmap execution.
• Collaborate closely with BA, PM, and Engineering teams to ensure security, performance, and delivery objectives align with organisational goals.

Requirements

Required Skills & Experience

• 6-10 years of experience in DevOps, Cloud, or Infrastructure engineering with strong security exposure.
• Hands-on experience with CI/CD tools such as Jenkins, GitLab CI, or GitHub Actions.
• Strong expertise in AWS, Azure, or GCP cloud platforms with a focus on secure architecture.
• Proficiency in Infrastructure-as-Code using Terraform, Ansible, or similar tools.
• Experience securing and managing Docker and Kubernetes environments.
• Strong understanding of networking technologies: LAN/WAN, firewalls, VPN, load balancers.
• Knowledge of security frameworks and standards (OWASP, NIST, CIS Benchmarks).
• Experience with monitoring and logging tools (Prometheus, Grafana, ELK, CloudWatch, SIEM solutions).
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong communication and collaboration skills with the ability to influence engineering teams.

Preferred Qualifications (Good to Have)

• Diploma / Degree / B.Tech in IT, CS, MCA
• Experience in SOC operations or exposure to SIEM and SOAR tools.
• Relevant certifications such as: -AWS Security / DevOps Engineer – Professional -Certified Kubernetes Security Specialist (CKS) -CEH, CompTIA Security+, or equivalent.

A growth-driven environment with opportunities to lead, innovate, and upskill continuously.