{"id":4033258,"url":"https://alion.io/job/zact-cloud-devsecops-engineer","title":"Cloud DevSecOps Engineer","company":{"id":692410,"name":"Zact","domain":"zact.com","url":"https://alion.io/company/zact","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Google GKE","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"PCI DSS","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"Checkov","optional":true},{"name":"Configuration Management","optional":true},{"name":"OpenTofu","optional":true},{"name":"Python","optional":true},{"name":"Terraform","optional":true},{"name":"tfsec","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-10T15:07:03Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T19:19:07Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Zact is a leading fintech innovator specializing in cutting-edge payments apps. We are currently expanding our team and looking to hire a Cloud DevSecOps Engineer to champion our \"shift-left\" security initiatives. This is an exciting opportunity to embed security seamlessly into our infrastructure systems, leveraging cloud technologies and automated security practices to build resilient, compliant, and highly secure solutions.\nWhere You Are\nWe are a fully remote company with a focus on hiring in India. While we embrace a remote-first culture, time zones will be an important consideration for collaboration. Some flexibility for overlapping hours with EU/US team leads is expected.\nWhat You'll Do\nIntegrate and automate security controls directly into CI/CD pipelines, ensuring continuous vulnerability scanning, code analysis, and secure software delivery.\nDesign, implement, and maintain secure Infrastructure as Code across multiple environments, primarily focusing on Google Cloud (GCP).\nDrive compliance and continuous auditing, acting as the primary technical point of contact for automated and manual evidence collection, with a heavy focus on PCI-DSS and supporting SOC 2 requirements.\nManage and enforce Identity and Access Management (IAM), network security policies, and encryption standards across all cloud environments.\nConduct continuous infrastructure security monitoring, threat modeling, and automated compliance auditing using tools like GCP Security Command Center (SCC) and Prisma Cloud.\nCollaborate with development teams to resolve security vulnerabilities, streamline secure deployment workflows, and cultivate a security-first engineering culture.\nRequired Skills\n5+ years of experience in DevSecOps, Cloud Security, or DevOps, with a deep understanding of securing cloud-native infrastructure and automation.\nStrong expertise with Kubernetes (GKE preferred) and container security practices, including hands-on experience with Helm.\nSolid proficiency with Google Cloud (GCP) security architecture, utilizing native tools for posture management and threat detection.\nHands-on experience with security tooling such as SAST/DAST, container scanning (e.g., Trivy, Scout, PrismaCloud), and cloud security posture management (CSPM) platforms like Prisma Cloud and GCP Security Command Center.\nPractical experience working within regulated fintech environments, specifically executing technical evidence collection for PCI-DSS and SOC 2 audits.\nProficient in scripting languages such as Python or Bash.\nComprehensive knowledge of networking, zero-trust architectures, and system administration in cloud environments.\nPreferred Skills\nFamiliarity with configuration management tools (e.g., Terraform, OpenTofu) and IaC security scanning (e.g., tfsec, Checkov).\nExposure to microservices architectures and best practices for secure deployment.\nAbout Zact\nAt Zact, we are redefining expense and payment management systems for organizations. Our mission is to align employee spending with finance and accounting teams while offering built-in controls and continuous reconciliation. As we expand internationally, we're looking for the right people to join us on this exciting journey.","description_format":"text","description_chars":3204,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Cards & Card Issuing","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-11-10T19:19:07Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":35,"reasons":["conf:1","win:early"],"computed_at":"2026-11-10T21:14:01Z"},"pay":null,"html_url":"https://alion.io/job/zact-cloud-devsecops-engineer","json_url":"https://alion.io/job/zact-cloud-devsecops-engineer.json","meta":{"generated_at":"2026-11-10T21:14:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14712,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":692410},"rest":"https://alion.io/mcp/rest/get_company?id=692410"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzact-cloud-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzact-cloud-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzact-cloud-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zact-cloud-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzact-cloud-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4033258}},{"tool":"search_jobs","arguments":{"company":"zact.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4033258},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}