{"id":3144966,"url":"https://alion.io/job/tekion-devsecops-manager","title":"DevSecOps Manager","company":{"id":804,"name":"Tekion","domain":"tekion.com","url":"https://alion.io/company/tekion","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":81,"open_postings":12,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":26000,"max_usd":62000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"PCI DSS","optional":false},{"name":"SBOM","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SOC 2","optional":false},{"name":"Tekton","optional":false}],"status":"live","first_seen_at":"2026-10-23T09:35:15Z","employer_posted_date":null,"last_verified_at":"2026-10-23T09:35:15Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"We are looking for a DevSecOps Manager to lead the team responsible for securing Tekion's cloud infrastructure, container platforms, and CI/CD pipelines. You will manage a team of 5-8 DevSecOps engineers, own the team's roadmap and delivery commitments, and be accountable for the security posture of the infrastructure and deployment platforms. Tekion's engineering organization runs on.\n\nThis is a people and delivery leadership role. You will not be writing production code day to day, but you are expected to have the technical depth to review designs, challenge approaches, make informed tradeoffs, and earn the trust of a senior engineering team. Your success is measured by the quality, velocity, and growth of your team and by measurable improvement in security outcomes.\n\nThe core responsibilities for the job include the following:\n\nTeam Leadership and People Management: \nBuild the Team: Own hiring for the DevSecOps team end to end, define roles and leveling, run a high-signal interview loop, and close senior candidates in a competitive market.\nDevelop Engineers: Run regular 1:1s, set clear expectations and growth plans, and actively develop engineers toward senior and staff scope. Create and defend time for learning and deep work.\nPerformance Management: Give direct, timely feedback. Run fair and well-evidenced performance cycles, recognize strong contribution, and address underperformance early and constructively.\nTeam Health: Own on-call sustainability, workload balance, and retention. Build a psychologically safe environment where engineers surface risk and bad news early.\n\nDelivery and Execution: \nRoadmap Ownership: Own the DevSecOps team roadmap. Translate security strategy and engineering priorities into a sequenced, resourced plan with clear owners and dates.\nPredictable Delivery: Run planning, prioritization, and execution rituals. Deliver committed work predictably and communicate slippage early with options, not surprises.\nPrioritization and Tradeoffs: Arbitrate between security remediation, platform investment, compliance obligations, and support requests and make the reasoning behind those calls visible.\nDependency Management: Identify and unblock cross-team dependencies with cloud security, product security, SRE, and application teams before they become delivery risk.\nMetrics and Reporting: Define and report the team's operating metrics, vulnerability SLA adherence, mean time to detect and remediate, pipeline security coverage, and control-automation progress to engineering leadership.\n\nSecurity Program Ownership: \nPlatform Security Posture: Be accountable for the security posture of cloud infrastructure (AWS/Azure), Kubernetes and container platforms, and CI/CD toolchains.\nShift-Left Program: Own the program that embeds automated security testing, static and dynamic analysis, IaC scanning, and dependency scanning into the development lifecycle, with adoption and signal quality as explicit goals.\nVulnerability Management: Own the vulnerability lifecycle for the team's scope intake, risk-based prioritization, SLA definition and enforcement, remediation tracking, and exception governance.\nCompliance and Audit Readiness: Partner with GRC and Cloud Security to ensure infrastructure and deployments meet SOC 2, ISO 27001, PCI-DSS, and GDPR/CCPA obligations. Drive automated, continuously evidenced controls over manual evidence collection.\nStandards and Governance: Work with Cloud Security and Product Security to define security standards, policies, and frameworks, then own their rollout and adoption within your scope.\n\nOperational Excellence and Incident Response: \nSecurity Incident Management: Own the team's security incident response readiness. Act as incident commander or escalation point for infrastructure and pipeline security events.\nPost-Incident Rigor: Ensure every significant incident produces a blameless post-mortem with tracked systemic remediation, not just a closed ticket.\nDetection Coverage: Hold the team accountable for monitoring and alerting coverage, alert quality, and runbook completeness.\nRisk Escalation: Maintain a clear-eyed view of accepted risk in your scope and escalate it to leadership with context and recommended options.\n\nTechnical Judgment and Cross-Functional Partnership: \nTechnical Depth: Review designs and architecture proposals, ask the right questions, and make or ratify consequential technical decisions without becoming the bottleneck.\nBuild vs Buy: Lead tooling evaluation and vendor decisions for security tooling, with cost, integration effort, and operational burden all accounted for.\nStakeholder Management: Represent the team to engineering leadership, security, GRC, and, where needed, enterprise customers and auditors.\nSecurity-First Culture: Partner with peer engineering managers to make secure practice the default across development teams through enablement, documentation, and shared goals rather than mandates.\n\nRequirements: \nBachelor's degree in computer science, engineering, or a related technical field, or equivalent practical experience.\n10+ years of experience in DevSecOps, Infrastructure Security, or Security Engineering roles.\n3+ years directly managing engineers, including hiring, performance management, and career development. Prior experience as a senior individual contributor before moving into management.\nStrong working knowledge of cloud infrastructure (AWS, GCP, or Azure), container platforms (Docker, Kubernetes), and modern CI/CD toolchains such as Jenkins, Tekton, GitHub Actions, and ArgoCD enough to lead technical discussions credibly.\nSolid understanding of secure infrastructure design, identity and access management, network security, and infrastructure-as-code practices.\nDemonstrated experience owning a security or infrastructure program with measurable outcomes, vulnerability SLAs, control automation, audit readiness, or incident-response maturity.\nExperience running incident response and blameless post-mortem practice for production systems.\nExcellent written and verbal communication; able to brief engineering leadership and translate technical risk into business terms.\n\nPreferred: \nExperience managing a DevSecOps, cloud security engineering, or platform security team specifically.\nHands-on experience taking an organization through SOC 2, ISO 27001, or PCI-DSS certification or audit.\nExperience in a multi-tenant SaaS environment handling regulated consumer or financial data.\nFamiliarity with policy-as-code (OPA, Kyverno), secrets management (Vault, KMS), and software supply chain security (SBOM, artifact signing).\nExperience building a team from a small base, defining processes, and operating a cadence where little existed.\nExposure to securing AI/ML workloads and agentic systems.\nRelevant certifications such as CISSP, CCSP, CKS, or AWS Certified Security - Specialty.\nSkills\nAWS, ArgoCD, Azure, Docker, GCP, Jenkins, Kubernetes, Tekton, devsecops, infrastructure security, security engineering","description_format":"text","description_chars":6991,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Automotive Software"],"lifecycle":[{"event":"open","at":"2026-10-23T09:35:15Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":4,"expected_fill_days":48,"reasons":["seen:4","stale_co","velocity","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/tekion-devsecops-manager","json_url":"https://alion.io/job/tekion-devsecops-manager.json","meta":{"generated_at":"2026-10-28T10:01:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13076,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":804},"rest":"https://alion.io/mcp/rest/get_company?id=804"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftekion-devsecops-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftekion-devsecops-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftekion-devsecops-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tekion-devsecops-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftekion-devsecops-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3144966}},{"tool":"search_jobs","arguments":{"company":"tekion.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3144966},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}