Walk-in | Devsecops Engineer

MKS Vision Group; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

PennEngineering in Bangalore, India is seeking a DevSecOps Engineer to accelerate secure software delivery across CI/CD, cloud infrastructure, and security practices. This mid-senior IC role emphasizes embedding security in every stage of development and mentoring junior engineers.

You'll own automated security gates, IaC workflows, cost visibility, and incident readiness, collaborating with CX teams to ensure fast, secure releases in a complex digital environment.

Qualifications

• Hands-on DevSecOps in AWS with security embedded.

Responsibilities

• Design and maintain secure CI/CD pipelines.

Skills

AWS

CI/CD

Security tooling

Terraform

CDK

IAM & Secrets

Network security

Observability

Mentoring

Education

Bachelor's degree in CS/Engineering

Tools

GitHub Actions

GitLab CI

AWS

Job description

PennEngineering

Job Title: DevSecOps Engineer

Location: Bangalore, India

Employment Type: Full-time

Relevant Experience: 5-7 Years in DevOps / Security-embedded delivery

About PennEngineering

PennEngineering offers innovative fastening solutions for a variety of applications across industries like

Automotive Electronics, Consumer Electronics, Datacom and more.

Job Summary

As PennEngineering accelerates its Speed of Now transformation, the Customer Experience (CX) team is

responsible for customer-facing digital products. We are looking for a DevSecOps Engineer who keeps our

delivery pipelines fast, secure, and reliable. This is a mid-senior individual contributor role with a mentoring

component: you will work across CI/CD, cloud infrastructure, and security practices, ensuring security is built

into every stage of delivery rather than bolted on at the end. You will also help bring junior and mid-level

engineers up to speed on platform and security fundamentals.

Key Responsibilities

1. CI/CD & Developer Experience

• Design, maintain, and improve CI/CD pipelines with integrated security gates: SAST, dependency

scanning, container image scanning, and secrets detection before production

• Build pipeline patterns that engineering teams adopt with minimal friction
• Own environment promotion practices (dev to stage to prod) with appropriate quality and security

approvals

• Contribute to developer experience standards that reduce friction and keep engineers productive

2. Cloud Infrastructure & Platform

• Manage and improve AWS infrastructure using Terraform or AWS CDK; all infrastructure in code
• Support multi-environment AWS structure (dev, stage, prod) with secure account segmentation
• Work with networking components including VPC, CloudFront, WAF, and Route 53
• Contribute to cost visibility and tagging standards so engineering teams see the cost impact of their

decisions

3. Security Engineering (Embedded, Not Siloed)

• Implement and maintain security controls across IAM, secrets management, network segmentation,

and encryption

• Run and triage vulnerability scanning, dependency audits, and compliance checks as part of standard

delivery

• Support CIS Benchmark and NIST control alignment; flag gaps and help remediate them
• Partner with the DevOps Architect and Application Architect on security architecture decisions

4. Observability & Incident Response

• Contribute to the observability stack: structured logging, distributed tracing, metrics, and alerting
• Participate in incident response, help write and maintain runbooks, and contribute to on-call readiness
• Track SLIs and SLOs for customer-facing products and flag availability or performance issues early

5. Mentoring & Knowledge Sharing

• Coach junior and mid-level engineers on DevSecOps practices, security hygiene, and pipeline

standards

• Document platform standards and security runbooks in a way that is accessible and actionable
• Participate in code and infrastructure reviews with a constructive, teaching-oriented approach

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Engineering, or a related technical field
• 5-7 years in DevOps, platform engineering, or SRE with security meaningfully embedded in that

experience

• Hands-on AWS experience: VPC, ECS or EKS, Lambda, API Gateway, IAM, GuardDuty, Security
• Hub, CloudWatch
• Infrastructure as code using Terraform or AWS CDK; this is non-negotiable
• CI/CD pipeline experience with integrated security tooling: GitHub Actions, GitLab CI, or AWS
• CodePipeline
• Practical security experience: least-privilege IAM, secrets management, SAST/DAST tooling,
• encryption
• Familiarity with CIS Benchmarks and NIST controls at an implementation level, not just awareness
• Experience with structured logging, distributed tracing, and alerting in production environments
• Clear communicator who can explain security and infrastructure decisions to both engineering peers

and non-technical stakeholders

Preferred Qualifications

• AWS Security Specialty or AWS DevOps Engineer Professional certification
• Experience with container security: image scanning, runtime policies, Kubernetes security posture
• Familiarity with compliance frameworks relevant to multi-region platforms (GDPR, data residency)
• Background in B2B, industrial, or manufacturing technology environments

Key Competencies

• Platform availability: uptime and SLO attainment across all CX products
• Deployment frequency and change failure rate: DORA metrics across the engineering team
• Security posture: compliance with CIS/NIST controls; time-to-remediate identified vulnerabilities
• Infrastructure as code coverage: percentage of infrastructure managed in code
• Developer experience: time-to-first-deploy for new engineers; engineering team feedback scores
• Knowledge transfer: quality and adoption of runbooks, documentation, and mentoring contributions