{"id":1272863,"url":"https://alion.io/job/innovatily-security-platformdevsecops-engineer","title":"Security Platform/DevSecOps Engineer - Container & Cloud Security","company":{"id":2420550,"name":"Innovatily","domain":"innovatily.com","url":"https://alion.io/company/innovatily","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":40000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Nginx","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"SOC 2","optional":false},{"name":"Ubuntu","optional":false},{"name":"Wiz","optional":false},{"name":"Grype","optional":true},{"name":"Snyk","optional":true},{"name":"Trivy","optional":true}],"status":"live","first_seen_at":"2026-08-31T07:50:31Z","employer_posted_date":null,"last_verified_at":"2026-08-31T07:50:31Z","board_verified":false,"closed_at":null,"days_open":47,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":47},"description":"Security Platform / DevSecOps Engineer Container & Cloud Security\n\nRole Summary:\n\nWe are seeking a hands-on Security Platform / DevSecOps Engineer to help advance security engineering initiatives across hardened container images, CI/CD security enablement, vulnerability reduction, cloud security tooling, and compliance-supporting automation. This role will work closely with Security, DevOps, SRE, Engineering, and vendor teams to operationalize secure-by-default platform capabilities and reduce execution risk across active security programs.\n\nWhy This Role Is Needed:\n\nSecurity is supporting multiple concurrent priorities, including SOC2, GovRAMP, cloud security, vulnerability management, PSIRT design and implementation, CNAPP strategy, CI/CD security initiatives, Secrets-to-Vault migration, customer security reviews, security intake, and Belden integration activities.\n\nKey Responsibilities:\n\n- Own and drive hardened base image evaluation and rollout activities, including POC planning, technical validation, and migration support for engineering teams.\n\n- Analyze existing Dockerfiles and container build workflows, then adapt them to hardened or minimal image models, including multi-stage builds, shell-less images, non-root runtime patterns, package dependencies, and custom module handling.\n\n- Partner with engineering teams to onboard representative services and validate hardened images against real application requirements such as NGINX, Go/protoc builds, Java runtime images, Ubuntu-derived workloads, and package-specific constraints.\n\n- Support container registry integration patterns, including GCP Artifact Registry mirroring, pull-through cache models, self-hosted registries, scheduled synchronization, and related tooling such as Skopeo.\n\n- Help integrate security tooling into CI/CD workflows to improve vulnerability visibility, image hygiene, SBOM adoption, signing/verification practices, and continuous remediation.\n\n- Coordinate with vendors and internal stakeholders during POCs, technical troubleshooting, architecture reviews, pricing/licensing inputs, support escalations, and rollout planning.\n\n- Contribute to vulnerability management and CNAPP-related initiatives by supporting cloud security tooling, including Wiz-related workflows and integration considerations.\n\n- Collaborate with Compliance/GRC stakeholders to ensure engineering controls and integrations can support SOC2, GovRAMP, Vanta evidence collection, and audit-readiness needs.\n\n- Document technical patterns, migration guidance, implementation decisions, known limitations, and support procedures for engineering adoption.\n\n- Provide practical technical support across global teams, with the ability to collaborate effectively with APAC/India-based engineering resources.\n\nRequired Qualifications:\n\n- Strong hands-on experience with Docker, container image construction, multi-stage builds, Linux package management, and runtime hardening.\n\n- Practical experience with Kubernetes or containerized production environments.\n\n- Experience with CI/CD pipelines and secure software delivery workflows.\n\n- Working knowledge of container vulnerability scanning, image patching, SBOMs, image signing, and supply-chain security concepts.\n\n- Familiarity with cloud environments, especially GCP and GCP Artifact Registry.\n\n- Ability to troubleshoot build-time and runtime container issues, including missing shells, package dependencies, module paths, non-root execution, and registry access.\n\n- Strong scripting or automation skills in Bash, Python, Go-adjacent build tooling, or similar.\n\n- Ability to work across Security, DevOps, SRE, Engineering, Compliance, and external vendor teams.\n\n- Strong written communication skills for documenting migration patterns, technical findings, and rollout guidance.\n\nPreferred Qualifications:\n\n- Experience with hardened, minimal, or distro-less container images.\n\n- Experience with Minimus, Chainguard, Wolfi, Alpine, Ubuntu, or equivalent secure image ecosystems.\n\n- Familiarity with Wiz, Orca, Vanta, Grype, Trivy, Snyk, or similar CNAPP / vulnerability management / compliance tools.\n\n- Experience supporting SOC2, GovRAMP, CRA, NIS2, or similar security/compliance initiatives from an engineering-control perspective.\n\n- Experience integrating security tooling into developer workflows without creating unnecessary engineering friction.\n\n- Experience working with globally distributed teams, especially across North America and APAC time zones.\n\nSuccess Measures:\n\n- Hardened base image POC progresses from evaluation into documented implementation patterns and repeatable onboarding guidance.\n\n- Engineering teams can migrate representative services to approved hardened image patterns with fewer blockers and clearer support paths.\n\n- CI/CD security and base image scanning workflows become more repeatable, better documented, and less dependent on a single individual.\n\n- Security gains additional execution capacity for CNAPP transition work, Secrets-to-Vault, base image/CI-CD security scanning, and vulnerability remediation coordination.\n\n- Compliance and audit activities benefit from more reliable technical evidence, better tooling integration, and clearer ownership of security engineering controls.\nSkills\nDocker, Kubernetes, CI/CD, Cloud Security, DevSecOps, Security, DevOps, SOC II, Bash Scripting","description_format":"text","description_chars":5356,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-09-26T00:07:01Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.526,"p_room":0.45,"age_days":46,"expected_fill_days":26,"reasons":["seen:46","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/innovatily-security-platformdevsecops-engineer","json_url":"https://alion.io/job/innovatily-security-platformdevsecops-engineer.json","meta":{"generated_at":"2026-10-17T08:16:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11239,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2420550},"rest":"https://alion.io/mcp/rest/get_company?id=2420550"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finnovatily-security-platformdevsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finnovatily-security-platformdevsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finnovatily-security-platformdevsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/innovatily-security-platformdevsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finnovatily-security-platformdevsecops-engineer"}]}