Staff DevSecOps Engineer

Tekion; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Tekion in Bengaluru is seeking a Senior Security Engineer to lead DevOps security and SRE initiatives across cloud and container platforms. You will drive secure by design practices, automate controls, and collaborate with global security teams to strengthen threat detection and governance.

You will mentor engineering teams and help advance incident response, vulnerability management, and secure CI/CD pipelines in a fast-paced environment.

Qualifications

• Bachelor's degree in computer science, engineering, or related field, or equivalent practical experience.
• 9+ years in DevOps, SRE, or Security Engineering with hands-on cloud infrastructure experience.
• Deep knowledge of secure infrastructure design, IAM, network security, and related best practices.
• Experience securing container platforms (Docker, Kubernetes) and modern CI/CD toolchains (Jenkins, Tekton, GitHub Actions, ArgoCD).
• Proficiency in at least one scripting language (Python, Go) and strong automation skills.
• Familiar with vulnerability management, threat modelling, and remediation workflows.
• Strong collaboration, communication, and documentation abilities.

Responsibilities

• Embed security by design across the SDLC, from code commit to deployment.
• Collaborate with Cloud Security and Product Security teams to enforce security standards, policies, and frameworks.
• Infrastructure hardening across AWS/GCP/Azure, Kubernetes clusters, containers, and other infrastructure components.
• CI/CD security: integrate automated security testing, SAST/DAST, and vulnerability scanning into pipelines.
• Threat detection and incident response: monitoring, triage, root cause analysis, and response.
• Tooling and automation: build automation for compliance checks, secrets management, access controls, patching, and audit logging.
• Governance: ensure infrastructure and deployments comply with regulations and Tekion internal security requirements.
• Continuous improvement: stay updated on threats and implement relevant improvements.
• Evangelism: promote security-first mindset through knowledge sharing and training.

Skills

Cloud Security

DevOps

SRE

Kubernetes

Automation

Python

Go

Education

Bachelor's degree in Computer Science, Engineering or related field

Tools

AWS

GCP

Azure

Docker

Kubernetes

Jenkins

Tekton

GitHub Actions

ArgoCD

Job description

Responsibilities:

• Security Integration: Embed security best practices across the software development lifecycle (SDLC), from code commit to deployment, ensuring "security by design. "
• Collaboration: Work closely with Cloud Security and Product Security teams to develop and enforce security standards, policies, and frameworks.
• Infrastructure Hardening: Implement and automate security controls acrossAWS/Azure/GCP resources, Kubernetes clusters, containers, and other infrastructure components.
• CI/CD Security: Integrate automated security testing, static and dynamic analysis, and vulnerability scanning into CI/CD pipelines.
• Threat Detection and Incident Response: Develop and maintain monitoring/alerting for security incidents; participate in incident triage, root cause analysis, and response efforts.
• Tooling and Automation: Build and maintain automation for compliance checks, secrets management, access controls, patching, and audit logging.
• Governance: Ensure the team's infrastructure and deployments are compliant with industry regulations and Tekion's internal security requirements.
• Continuous Improvement: Stay current with emerging threats, vulnerabilities, and security best practices; propose and implement relevant improvements.
• Evangelism: Foster a security-first mindset within DevOps and engineering teams through knowledge sharing, documentation, and training.

Requirements:

• Bachelor's degree in computer science, Engineering, or a related technical field, or equivalent practical experience.
• 9+ years of experience in DevOps, Site Reliability Engineering, or Security Engineering roles. Solid hands-on experience with cloud infrastructure (AWS/GCP/Azure).
• Deep understanding of secure infrastructure design, identity and access management, network security, and related best practices.
• Experience securing container platforms (Docker, Kubernetes) and modern CI/CD toolchains(e. g., Jenkins, Tekton, GitHub Actions, ArgoCD).
• Proficiency in at least one scripting/programming language (Python, Go, etc. ) and strong automation skills.
• Practical familiarity with vulnerability management, scanning, threat modelling, and remediation workflows.
• Strong collaboration, communication, and documentation abilities.