{"id":2812735,"url":"https://alion.io/job/xgy-innovation-senior-devsecops-engineer","title":"Senior DevSecOps Engineer","company":{"id":4446516,"name":"XGY Innovation","domain":"xeynergy.com","url":"https://alion.io/company/xgy-innovation","size_band":null,"is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colombo, Sri Lanka"],"countries":["LK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":34000,"max_usd":79000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GCP","optional":false},{"name":"GitLab CI","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-08-31T18:57:39Z","employer_posted_date":null,"last_verified_at":"2026-08-31T18:57:39Z","board_verified":false,"closed_at":null,"days_open":49,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":49},"description":"About this role\n\nXeynergy is hiring on behalf of one of our international clients for a Senior DevSecOps Engineer to join a high-performing engineering team. This is a hands-on role focused on owning the full remediation lifecycle of security findings across a modern cloud-native platform built on GCP and Kubernetes.\n\nKey Responsibilities\n\nSecurity Remediation & VAPT Management\n\nOwn and manage security findings from third-party VAPT engagements, audits, and compliance assessments through to verified closure.\n\nAnalyse findings, identify root causes, and coordinate remediation activities with engineering teams.\n\nWork directly with external assessors for clarifications, retesting, and sign-off processes.\n\nMaintain accurate tracking of findings, severity levels, ownership, remediation status, and closure evidence.\n\nVulnerability & Scanner Findings Management\n\nRemediate findings from cloud posture tools, container scans, SAST/DAST tools, dependency scans, and secret detection platforms.\n\nPrioritise remediation based on severity, exploitability, and business impact.\n\nEnsure vulnerabilities are fully resolved and validated.\n\nCI/CD & DevSecOps\n\nIntegrate security controls and automated remediation checks into GitLab CI/CD pipelines.\n\nImplement security gates to prevent regression of critical and high-severity vulnerabilities.\n\nContinuously improve DevSecOps processes and automation practices.\n\nGCP & Kubernetes Security\n\nRemediate security findings related to GCP IAM, cloud configurations, exposed services, and Kubernetes environments.\n\nHarden GKE clusters, RBAC policies, pod configurations, and network policies in line with CIS Benchmarks and security best practices.\n\nCollaborate with platform teams to improve cloud security posture across environments.\n\nReporting & Compliance\n\nMaintain audit-ready remediation evidence and documentation.\n\nProvide regular reporting on remediation progress, SLA adherence, and overall risk posture.\n\nSupport security and compliance initiatives as required.\n\nRequired Skills & Experience\n\nStrong hands-on experience with:\n\nGCP\n\nGKE / Kubernetes\n\nGitLab CI/CD\n\nTerraform\n\nBash/Shell scripting\n\nExperience managing and remediating findings from VAPT engagements and security assessments.\n\nSolid understanding of:\n\nOWASP Top 10\n\nCIS Benchmarks\n\nCloud security best practices\n\nIAM and Kubernetes security concepts\n\nExperience with vulnerability management, cloud posture management, and container security tools.\n\nAbility to work independently and take ownership of remediation activities end-to-end.\n\nPreferred Certifications\n\nGoogle Professional Cloud Security Engineer\n\nCertified Kubernetes Security Specialist (CKS)\n\nCertified Ethical Hacker (CEH)\n\nCompTIA Security+\n\nWhy Join?\n\nOpportunity to work with an international client on enterprise-scale cloud infrastructure.\n\nExposure to modern DevSecOps and cloud security practices.\n\nCollaborative and fast-paced engineering environment.\n\nCompetitive compensation and long-term growth opportunities.","description_format":"text","description_chars":3001,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Growth opportunities"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps"],"lifecycle":[{"event":"open","at":"2026-10-18T09:02:11Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.591,"p_room":0.45,"age_days":48,"expected_fill_days":26,"reasons":["seen:48","urgency","win:tail"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/xgy-innovation-senior-devsecops-engineer","json_url":"https://alion.io/job/xgy-innovation-senior-devsecops-engineer.json","meta":{"generated_at":"2026-10-20T03:03:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3352,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4446516},"rest":"https://alion.io/mcp/rest/get_company?id=4446516"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxgy-innovation-senior-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxgy-innovation-senior-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxgy-innovation-senior-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xgy-innovation-senior-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxgy-innovation-senior-devsecops-engineer"}]}