{"id":3956132,"url":"https://alion.io/job/etec-lead-cloud-security-devsecops","title":"Lead - Cloud Security & DevSecOps","company":{"id":674947,"name":"Etec","domain":"etec.com","url":"https://alion.io/company/etec-2","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"Grafana","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"Prometheus","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Terraform","optional":false},{"name":"Agile","optional":true},{"name":"Checkov","optional":true},{"name":"Kyverno","optional":true},{"name":"SIEM","optional":true},{"name":"Snyk","optional":true},{"name":"SonarQube","optional":true},{"name":"Trivy","optional":true}],"status":"live","first_seen_at":"2026-11-09T04:26:50Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T08:26:37Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"We exist to make it better. \nWe’re a new generation software company based in Hyderabad, helping to scale digital businesses to disrupt global utility retail markets. We provide technology development, customer experience and process optimisation services to support our award-winning utility retailers in New Zealand and Australia. \nIt’s an exciting time where traditional utilities need to innovate. Consumers expect companies to do good for their employees, customers, local communities, and for the future of the planet (all while offering seamless user experience that’s great value). Our strategy recognises that the exceptional technology we create makes us one of the best consumer facing businesses in our industry.\nOur Culture: The “Real” Deal\nWe don’t just build software; we build careers through our Employee Value Proposition (EVP):\nReal Growth: Learning is integral to delivery. We provide clear pathways and role-based upskilling and certifications.\nReal Care: energytec elevate (e²): 3 hours of protected in-work learning time each week to enable sustainable high performance, continuous development, and long-term career growth; we value sustainable impact over burnout.\nReal Impact: Turn your learning into a legacy. Work with Practice Champions to strengthen our platform architecture and reduce dependencies.\nJob Description\nLead - Cloud Security & DevSecOps\nAbout the Role\nWe are looking for a Lead - Cloud Security & DevSecOps to own the security posture of our AWS cloud platform and CI/CD pipelines, while supporting, designing, and implementing scalable, secure, and reliable infrastructure and DevOps practices. You will lead vulnerability management, drive remediation of AWS Security Hub and Inspector findings, embed security into GitLab CI/CD, and leverage AI-driven insights for proactive monitoring and operational efficiency.\nAI-first engineering at energytec.ai\nAt energytec.ai (eTEC), we build with an AI-first mindset, operating as a human-led, agent-operated organization where engineers own outcomes and use AI responsibly to accelerate delivery, improve quality, and strengthen platform resilience.\nApply AI across Operations & Security: Utilize AI-driven tools for predictive alerts, intelligent log analysis, threat and anomaly detection, automated incident resolution, and risk-based vulnerability prioritization.\nGuardrails & Governance: Maintain non-negotiable guardrails for security, code reviews, and infrastructure compliance while monitoring reliability through SLOs, DORA metrics, and system performance.\nKnowledge Sharing: Actively share knowledge and standardize prompts, playbooks, and reusable automation scripts to multiply overall team effectiveness.\nResponsibilities\nCloud security posture: Own and continuously improve the AWS security posture across accounts, VPCs, IAM, KMS, Secrets Manager, WAF, CloudTrail and Control Tower.\n Vulnerability management and reporting: Be accountable for the end-to-end vulnerability management lifecycle: discovery, risk-based prioritisation, remediation, verification and reporting. Triage and drive closure of AWS Security Hub and Amazon Guard Duty findings (EC2, ECR, Lambda) against agreed SLAs, coordinating remediation with application and platform teams. Run security reviews covering remediation SLAs, exposure reduction and compliance metrics for leadership and audit readiness.\n Governance, guardrails and compliance: Define, implement and monitor preventative guardrails, Service Control Policies (SCPs) and AWS Config conformance packs across all accounts, ensuring cloud infrastructure and pipelines align with CIS benchmarks and the NIST framework, and support audits. Own the security exception and risk-acceptance workflow, ensuring every suppression or unpatched finding has a documented business rationale, compensating controls and an expiry date.\n DevSecOps pipelines: Integrate and maintain security checks in GitLab CI/CD, including SAST, DAST, SCA, secret detection, container image scanning and IaC scanning, with quality gates and policy-as-code (shift-left).\n Container and workload hardening: Harden and secure workloads on ECS, EKS and RDS, covering hardened container image baselines (CIS), RBAC, network policies and end-to-end encryption.\nSecure Infrastructure as Code and automation: Review and enforce secure Terraform practices, and automate security controls and routine operational tasks.\nThreat detection and incident response: Build and operate AI-driven threat detection that triages alerts and raises actionable GitLab issues, and lead security incident response from containment through to root cause analysis and post-incident actions. Troubleshoot application and infrastructure issues across ECS, EKS, RDS, EC2, networking and CI/CD.\nLeadership and standards: Mentor DevOps and systems engineers, define security standards and runbooks, conduct security reviews of new architectures and releases, and champion DevSecOps practices across the organisation.\nMinimum Qualifications\nCore experience: 8+ years of hands-on experience in DevOps, cloud infrastructure or security engineering, with significant AWS cloud security exposure.\nAWS cloud security: Strong hands-on expertise with AWS Security Hub, Amazon Inspector, GuardDuty, IAM, KMS, CloudTrail, Config and WAF.\nDevSecOps: Proven experience securing GitLab CI/CD pipelines and integrating vulnerability scanning and automated security gates into deployment pipelines.\nVulnerability management: Practical experience with vulnerability management tooling, processes and remediation tracking.\nContainers and cloud workloads: Solid track record securing and operating ECS, EKS/Kubernetes and RDS, including security hardening of each.\nInfrastructure as Code and scripting: Strong practical experience with Terraform and automation scripting in Python or Bash.\nTroubleshooting and observability: Strong application and infrastructure troubleshooting and root cause analysis skills, with hands-on experience of Prometheus, Grafana, CloudWatch, OpenTelemetry or equivalent.\nLeadership and communication: Track record of leading and mentoring engineers, with strong written and verbal communication skills to influence cross-functional teams and present to stakeholders.\nGood to have\nCertifications: AWS Certified Security - Specialty, AWS Solutions Architect, CKA/CKS or equivalent.\nAI in DevSecOps: Prior hands-on experience applying AI/ML tools to security or operations work.\nSecurity tooling: Experience with Trivy, SonarQube, Snyk, Checkov, OPA/Kyverno or similar, and with SIEM and centralized logging.\nAgile delivery: Experience working in Agile teams to ship infrastructure and security improvements every sprint.\nWork Location: Hyderabad (ECIL X Roads)\nWork Mode: Work from Office (5 days a week)\nNotice Period: Looking for candidates who can join within 15 days\nOur vision is to be the most loved company wherever we play.\nAt the heart of our business is a purpose led culture. We’re a community at heart, and we know our people are unstoppable when they have the empowerment to come up with the answers. Here’s some of the benefits we give:\nFlexible working\nGrowth academy and internal career opportunities - we grow our people while we grow our company\nCompetitive salary\nFive extra days of paid leave every year to do the things that matter to you\nA paid volunteer day every year to give back to your community\nParental leave that’s above and beyond legal requirements\nWant to help us make it better? Apply and we’ll be in touch.","description_format":"text","description_chars":7527,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","DevSecOps","IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-09T08:26:37Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:1","win:early"],"computed_at":"2026-11-09T10:19:03Z"},"pay":null,"html_url":"https://alion.io/job/etec-lead-cloud-security-devsecops","json_url":"https://alion.io/job/etec-lead-cloud-security-devsecops.json","meta":{"generated_at":"2026-11-09T10:19:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10852,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":674947},"rest":"https://alion.io/mcp/rest/get_company?id=674947"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fetec-lead-cloud-security-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fetec-lead-cloud-security-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fetec-lead-cloud-security-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/etec-lead-cloud-security-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fetec-lead-cloud-security-devsecops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3956132}},{"tool":"search_jobs","arguments":{"company":"etec.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3956132},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}