DevSecOps Engineer - Cloud Security

Job Description : DevSecOps Engineer

Location : Bangalore

Position Type : Full-time

Work Experience : 2-5 Years

Position Overview :

We are looking for a DevSecOps Engineer (2-5 years experience) to join our engineering team at Belong.

The role involves embedding security into our cloud-native infrastructure, CI / CD pipelines, and application lifecycle. You will work closely with our DevOps, backend, frontend, and compliance teams to ensure that our systems are secure, compliant with ISO 27001 and IFSCA regulations, and resilient against emerging threats.

Key Responsibilities :

• Design and implement security controls across AWS (IAM, KMS, GuardDuty, Security Hub, Secrets Manager).
• Manage infrastructure as code (Terraform) with a focus on secure provisioning.
• Strengthen security in EKS clusters - network policies, RBAC, pod security, container image scanning.
• Integrate SAST, DAST, and dependency scanning tools into Bitbucket pipelines.
• Collaborate with developers to enforce secure coding practices in Python (FastAPI), Node.js (Next.js) and golang.
• Manage secrets and sensitive data flows (aligning with centralized PII architecture).
• Monitor and respond to incidents using Wazuh SIEM, Prometheus, Grafana, ClickHouse, and Signoz.
• Support compliance initiatives (ISO 27001 audits, IFSCA / RBI IT & Cybersecurity guidelines).
• Perform threat modeling, vulnerability assessments, and penetration testing support.
• Maintain documentation (Confluence runbooks, security playbooks, architecture diagrams).

Qualifications : :

Technical Skills :

Soft Skills :

(ref : hirist.tech)