๐ง๐ต๐ถ๐ ๐ฟ๐ผ๐น๐ฒ ๐ถ๐ ๐ณ๐ผ๐ฟ ๐ผ๐ป๐ฒ ๐ผ๐ณ ๐๐ต๐ฒ ๐ช๐ฒ๐ฒ๐ธ๐ฑ๐ฎ๐'๐ ๐ฐ๐น๐ถ๐ฒ๐ป๐๐
๐ฆ๐ฎ๐น๐ฎ๐ฟ๐ ๐ฟ๐ฎ๐ป๐ด๐ฒ: ๐ฅ๐ ๐ฑ๐ฌ๐ฌ๐ฌ๐ฌ๐ฌ - ๐ฅ๐ ๐ฏ๐ฌ๐ฌ๐ฌ๐ฌ๐ฌ๐ฌ (๐ถ๐ฒ ๐๐ก๐ฅ ๐ฑ-๐ฏ๐ฌ ๐๐ฃ๐)
Experience: 2+ yrs
Location: Bengaluru, Noida, Uttar Pradesh, India
Job Type: Full-time
We are looking for a security-focused and technically strong DevSecOps Engineer to help build, automate, secure, and maintain modern cloud-native environments. This role focuses on integrating security throughout the software development lifecycle while enabling reliable and efficient application delivery.
The ideal candidate will have practical expertise in DevSecOps, Google Cloud Platform (GCP), CI/CD, cloud security, infrastructure automation, and secure software delivery. You will work closely with development, security, infrastructure, and operations teams to strengthen security controls, automate engineering processes, and improve the reliability and scalability of cloud platforms.
Requirements
Key Responsibilities
- Design, implement, and maintain DevSecOps practices across the complete software development lifecycle.
- Build and manage secure CI/CD pipelines for automated build, testing, security validation, and deployment.
- Deploy, configure, monitor, and secure applications and infrastructure on Google Cloud Platform (GCP).
- Implement cloud security controls across compute, networking, storage, applications, and deployment environments.
- Integrate SAST, DAST, SCA, vulnerability scanning, secrets detection, and compliance checks into CI/CD workflows.
- Implement Infrastructure as Code and automate infrastructure provisioning, configuration, and deployment processes.
- Manage GCP IAM, service accounts, roles, permissions, secrets, encryption, logging, and security policies.
- Work with development teams to identify vulnerabilities and integrate secure coding and deployment practices.
- Support containerised and cloud-native workloads using technologies such as Docker and Kubernetes.
- Monitor cloud infrastructure, applications, security events, logs, and operational metrics.
- Troubleshoot deployment, infrastructure, networking, and security incidents and perform root-cause analysis.
- Establish secure and standardised deployment processes across development, testing, and production environments.
- Automate repetitive operational and security activities to improve engineering efficiency.
- Participate in security assessments, architecture reviews, incident response, and continuous improvement initiatives.
- Maintain documentation for cloud infrastructure, security controls, CI/CD processes, and operational procedures.
What Makes You a Great Fit
- 2+ years of experience in DevSecOps, DevOps, Cloud Engineering, Cloud Security, or a related role.
- Strong hands-on understanding of DevSecOps principles and secure software delivery practices.
- Practical experience with Google Cloud Platform (GCP) and cloud-native infrastructure.
- Good knowledge of GCP services including IAM, Compute, Storage, Networking, Logging, Monitoring, and security capabilities.
- Experience designing and maintaining CI/CD pipelines and integrating security controls into deployment workflows.
- Understanding of Infrastructure as Code, infrastructure automation, and configuration management.
- Hands-on experience with Docker, Kubernetes, Git, Linux, and scripting/automation is desirable.
- Knowledge of application security, vulnerability management, dependency scanning, secrets management, and access controls.
- Strong understanding of cloud security, networking, identity management, and least-privilege principles.
- Experience with monitoring, logging, alerting, incident management, and production troubleshooting.
- Strong analytical and problem-solving skills with excellent attention to security and operational detail.
- Ability to collaborate effectively with developers, security professionals, infrastructure teams, and other stakeholders.
- Strong ownership mindset with a focus on improving security, automation, reliability, scalability, and cloud operations.
- Relevant GCP, DevOps, cloud, or cybersecurity certifications would be an advantage.