DevSecops Engineer

'

: - ( - )

Experience: 2+ yrs

Location: Bengaluru, Noida, Uttar Pradesh, India

Job Type: Full-time

We are looking for a security-focused and technically strong DevSecOps Engineer to help build, automate, secure, and maintain modern cloud-native environments. This role focuses on integrating security throughout the software development lifecycle while enabling reliable and efficient application delivery.

The ideal candidate will have practical expertise in DevSecOps, Google Cloud Platform (GCP), CI/CD, cloud security, infrastructure automation, and secure software delivery. You will work closely with development, security, infrastructure, and operations teams to strengthen security controls, automate engineering processes, and improve the reliability and scalability of cloud platforms.

Requirements

Key Responsibilities

• Design, implement, and maintain DevSecOps practices across the complete software development lifecycle.
• Build and manage secure CI/CD pipelines for automated build, testing, security validation, and deployment.
• Deploy, configure, monitor, and secure applications and infrastructure on Google Cloud Platform (GCP).
• Implement cloud security controls across compute, networking, storage, applications, and deployment environments.
• Integrate SAST, DAST, SCA, vulnerability scanning, secrets detection, and compliance checks into CI/CD workflows.
• Implement Infrastructure as Code and automate infrastructure provisioning, configuration, and deployment processes.
• Manage GCP IAM, service accounts, roles, permissions, secrets, encryption, logging, and security policies.
• Work with development teams to identify vulnerabilities and integrate secure coding and deployment practices.
• Support containerised and cloud-native workloads using technologies such as Docker and Kubernetes.
• Monitor cloud infrastructure, applications, security events, logs, and operational metrics.
• Troubleshoot deployment, infrastructure, networking, and security incidents and perform root-cause analysis.
• Establish secure and standardised deployment processes across development, testing, and production environments.
• Automate repetitive operational and security activities to improve engineering efficiency.
• Participate in security assessments, architecture reviews, incident response, and continuous improvement initiatives.
• Maintain documentation for cloud infrastructure, security controls, CI/CD processes, and operational procedures.

What Makes You a Great Fit

• 2+ years of experience in DevSecOps, DevOps, Cloud Engineering, Cloud Security, or a related role.
• Strong hands-on understanding of DevSecOps principles and secure software delivery practices.
• Practical experience with Google Cloud Platform (GCP) and cloud-native infrastructure.
• Good knowledge of GCP services including IAM, Compute, Storage, Networking, Logging, Monitoring, and security capabilities.
• Experience designing and maintaining CI/CD pipelines and integrating security controls into deployment workflows.
• Understanding of Infrastructure as Code, infrastructure automation, and configuration management.
• Hands-on experience with Docker, Kubernetes, Git, Linux, and scripting/automation is desirable.
• Knowledge of application security, vulnerability management, dependency scanning, secrets management, and access controls.
• Strong understanding of cloud security, networking, identity management, and least-privilege principles.
• Experience with monitoring, logging, alerting, incident management, and production troubleshooting.
• Strong analytical and problem-solving skills with excellent attention to security and operational detail.
• Ability to collaborate effectively with developers, security professionals, infrastructure teams, and other stakeholders.
• Strong ownership mindset with a focus on improving security, automation, reliability, scalability, and cloud operations.
• Relevant GCP, DevOps, cloud, or cybersecurity certifications would be an advantage.