<p><p><b>Role : </b>DevSecOps Engineer<br/><br/><b>Experience : </b>5+ years<br/><br/><b>Location </b>: Mumbai</p><p><br/><b>About the Role :</b><br/><br/>We are seeking a skilled <b>DevSecOps Engineer</b> to integrate security into every phase of the DevOps lifecycle.
In this role, you will be responsible for automating security processes, ensuring compliance across cloud infrastructure, and working closely with cross-functional teams to drive secure software development and deployment practices.</p><p><br/><b>Key Responsibilities :</b><br/><br/>- Integrate security measures throughout the <b>CI/CD pipeline</b>.<br/><br/>- Automate security checks and workflows to detect and mitigate vulnerabilities early.<br/><br/>- Ensure infrastructure and applications comply with internal and external security standards.<br/><br/>- Collaborate with development, operations, and security teams to define and enforce best practices.<br/><br/>- Manage and monitor tools such as <b>IDS/IPS, SIEM, and vulnerability scanners</b>.<br/><br/>- Continuously evaluate infrastructure for security risks and proactively implement mitigations.<br/><br/>- Maintain and improve documentation of security processes and standards.<br/><br/>- Support audits and security assessments as needed.</p><p><br/><b>Required Qualifications :</b><br/><br/>- <b>5 to 7 years of experience</b> in DevSecOps, Cloud Security, or Infrastructure Security.<br/><br/>- Deep understanding of security best practices for <b>GCP, AWS, and Azure</b>.<br/><br/>- Strong experience with Linux administration and system hardening.<br/><br/>- Hands-on expertise with <b>Ansible, Azure DevOps, and CI/CD pipelines.</b><br/><br/>- Familiarity with tools like <b>IDS/IPS, SIEM, and vulnerability scanners</b>.<br/><br/>- Knowledge of security standards and frameworks such as <b>ISO 27001, NIST, and CIS</b>.<br/><br/>- Experience using <b>JIRA</b> for task and project tracking.<br/><br/>- Strong analytical and problem-solving skills; ability to thrive in a fast-paced environment.</p><p><br/><b>Preferred Qualifications :</b><br/><br/>- Certifications such as <b>AWS Security Specialty, GCP Security Engineer, CISSP, CEH, or CKA.</b><br/><br/>- Experience with Infrastructure as Code (IaC) tools like Terraform or CloudFormation, including security integrations.<br/><br/>- Knowledge of container security, particularly in <b>Docker and Kubernetes</b> environments.</p><br/></p> (ref:hirist.tech)