Senior DevSecOps Engineer

Job Summary :

We are seeking a Senior DevSecOps Engineer with deep hands-on expertise in securing CI / CD pipelines, cloud infrastructure, and containerized environments. The ideal candidate will have a strong background in DevOps / CloudOps with a security-first mindset and experience operating in compliance-heavy environments such as Finance, Healthcare, or SaaS.

Key Responsibilities Ownership :

• Architect, build, and manage secure CI / CD pipelines across various environments.
• Integrate security tools (SAST, DAST, SCA, secret scanners, vulnerability scanners) into the development lifecycle.
• Define and enforce code promotion, rollback, and release & Infrastructure Security :
• Manage and secure AWS or Azure environments with proper network controls (VPC, NAT, firewalls, route tables).
• Implement security group rules, NACLs, and compliance-based access controls.
• Collaborate with cloud architects to enforce governance and policy & Automation :
• Drive infrastructure-as-code using Terraform, Ansible, and Helm.
• Own and automate tooling such as Jenkins, Docker, Kubernetes, Git, etc.
• Streamline provisioning and configuration management & Orchestration Security :
• Secure Kubernetes clusters and Docker containers with RBAC, network policies, image scanning (Trivy, AquaSec), and runtime protection.
• Define pod security standards and ensure container hardening Logging & Incident Response :
• Set up observability stack using ELK, Prometheus, Grafana, CloudWatch, CloudTrail, and Splunk.
• Lead incident response efforts, perform root cause analysis, and implement mitigation & Governance :
• Work with Development, InfoSec, and IT Ops teams to ensure security is embedded in DevOps culture.
• Ensure alignment with regulatory requirements (ISO 27001, SOC 2, GDPR, etc.).

Required Skills & Technologies :

DevOps / CloudOps :

Qualifications :

(ref : hirist.tech)