Role Overview :
- As a DevSecOps Engineer at Fynd, you will be responsible for embedding security into the DevOps lifecycle, automating security processes, and ensuring compliance across our cloud-based infrastructure. You will collaborate with cross-functional teams to implement security best practices and proactively mitigate security risks.
What will you do at Fynd
Cloud Security & Infrastructure :Secure and manage cloud environments in GCP, AWS, and Azure.Implement best practices for cloud security, IAM, and compliance.Monitor and optimize cloud workloads for security and efficiency.Security Automation & DevOps Integration :Automate security processes using Ansible, Azure DevOps, and other tools.Integrate security checks into CI / CD pipelines to enable secure deployments.Conduct vulnerability assessments and harden infrastructure.Threat Detection & Incident Response :Deploy and manage IDS / IPS solutions to detect and prevent cyber threats.Monitor security logs and respond to incidents proactively.Work with SOC teams to enhance real-time threat detection.Compliance & Risk Management :Ensure adherence to industry security standards and compliance frameworks.Conduct gap assessments and implement remediation plans.Maintain security documentation and audit readiness.Collaboration & Continuous Improvement :Work closely with Engineering, DevOps, and Security teams to drive security initiatives.Stay updated with emerging security trends and threats.Advocate for a DevSecOps-first culture within the organisation.Some more requirements
5 to 7 years of experience in DevSecOps, Cloud Security, or Infrastructure Security.Strong expertise in GCP, AWS, and Azure security best practices.Proficiency in Linux administration and security hardening.Hands-on experience with Ansible, Azure DevOps, and CI / CD pipelines.Familiarity with security tools like IDS / IPS, SIEM, and vulnerability scanners.Knowledge of security frameworks (ISO 27001, NIST, CIS, etc.).Experience with JIRA for task management and tracking.Strong problem-solving skills and ability to work in a fast-paced environment.Preferred Qualifications (Nice to Have) :
Certifications like AWS Security Specialty, GCP Security Engineer, CISSP, CEH, or CKA.Experience with IaC security tools (Terraform, CloudFormation).Knowledge of container security (Docker, Kubernetes).Skills Required
Cloud Security, Automated Testing, Vulnerability Management