{"id":3812065,"url":"https://alion.io/job/zeta-devsecops-engineer-ii","title":"DevSecOps Engineer II","company":{"id":95345,"name":"Zeta","domain":"zeta.tech","url":"https://alion.io/company/zeta-tech","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":70,"open_postings":20,"ghost_share":0.5,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":45,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bitbucket","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Snyk","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2024-08-19T10:45:52Z","employer_posted_date":"2024-08-19","last_verified_at":"2026-11-07T03:38:45Z","board_verified":true,"closed_at":null,"days_open":809,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":808},"description":"About us:\nBuild the future of banking.\n\nZeta is a next-generation banking technology company providing cloud-native, fully stackable processing and core banking platforms for issuers. With a focus on scalability, compliance, and innovation, Zeta empowers financial institutions to modernize their technology infrastructure and deliver secure, seamless digital banking experiences.\nOur impact runs at real-world scale. Today, over 25 million cards are live on Zeta-powered platforms across 7 countries, supported by a passionate team of 1,700+ Zetanauts across India, the US, EMEA, and Asia. Backed bySoftBank Vision Fund, Mastercard, and other reputed strategic investors, we reached a valuation of $2 billion in 2025.\nOur focus is on establishing product lines that focus on key outcomes by addressing real customer pain points, modernizing legacy systems, and strengthening core fundamentals. As a result, our systems and platforms support a wide range of banking and payments capabilities, including:\n1. Tachyon, our cloud-native banking stack built for population-scale systems\n2. Cipher, our unified authentication platform for secure, high-volume banking environments\n3. Digital Credit as a Service, enabling banks to launch credit lines on UPI\n4.Elena, our intelligent and conversational AI platform for banking\n5. Pixel, India’s first digital-native credit card, launched in partnership with HDFC Bank, for whom we also revamped their PayZapp mobile app: Winner of the Celent Model Bank Award for Payments Innovation 2024\n6. Sparrow, the leading card experience for non-prime cardholders in the US\n…and more across cards, payments, lending, and core banking.\nWe are an engineering-first organization that values ownership, bias for action, and long-term thinking. Together, we solve some of the hardest problems in banking tech. Our culture is built around trust, collaboration, and creating the conditions for you to drive impact proportionate to your potential. Reinforcing our commitment to creating an inclusive and supportive workplace, we have been consistently recognized as a Great Place to Work.\nIf you want to build cutting-edge banking tech that enables banks to serve millions reliably, securely, and at a population scale, Zeta is your playground.\nIf you would like to learn more about how we have grown and evolved over the years, watch our journey here. You can also explore our website and follow us on LinkedIn,Instagram,YouTube, andX.\nAbout the Role:\nAs a Cloud Security & DevSecOps Engineer II, you will play a key role in strengthening the security posture of our cloud infrastructure, Kubernetes/container platforms and software delivery ecosystem.\nYou will work closely with Cloud/Platform, SRE, DevOps, Engineering, Product Security and Risk & Compliance teams to identify and mitigate security risks, build scalable security controls, automate recurring security activities and drive security findings through remediation and closure.\nThe role covers Cloud Security Posture Management (CSPM), IAM & Access Governance, DevSecOps, Kubernetes Security, Infrastructure Security, Vulnerability Management, Security Monitoring, Security Automation and Compliance Engineering, while also contributing to broader Information Security initiatives across the organisation.\nResponsibilities\nPerform continuous security posture assessments across AWS, Azure and GCPenvironments and identify cloud misconfigurations, insecure configurations and deviations from security baselines.\n\nConduct IAM and SSO access reviews, covering users, roles, groups, service accounts/service principals, permissions, access keys and privileged access, and identify excessive or stale access.\n\nIdentify and assess publicly exposed cloud resources, insecure network configurations and unnecessary external exposure across compute, storage, databases, load balancers and other cloud services.\n\nIntegrate security controls into CI/CD pipelines, including SAST, SCA, secrets scanning, Infrastructure-as-Code scanning, container/image scanning, DAST and software supply-chain controls.\n\nPerform Infrastructure-as-Code security reviewsand support secure implementation of Terraform and similar technologies.\n\nPerform Kubernetes and container security assessments, including cluster configurations, Kubernetes RBAC, workload security, image security, hardening and security posture management.\n\nAnalyse vulnerabilities and security findings, validate risks and false positives, prioritise remediation and work with Engineering/SRE/DevOps teams to drive findings through closure.\n\nDevelop security automation using Python, Bash, cloud APIs and CLIsfor IAM reviews, asset inventories, security assessments, compliance checks, monitoring, reporting and evidence collection.\n\nReview cloud network and edge security controls including VPC/VNet, Security Groups/firewalls, load balancers, WAF, TLS/mTLS and public/private connectivity.\n\nMonitor and review CloudSEK alerts and findings, perform initial analysis and validation, and coordinate remediation or escalation with relevant stakeholders.\n\nSupport CloudSEK block-rule activities, including review and validation of relevant indicators, domains and URLs, and coordinate appropriate blocking actions with responsible teams.\n\nSupport investigation of cloud and security alerts, exposed credentials, suspicious access, provider security notifications and other security events.\n\nParticipate in cloud architecture and design security reviewsand provide practical security recommendations based on risk, secure-by-design and least-privilege principles.\n\nSupport security and audit requirements aligned with frameworks such as CIS, NIST, PCI DSS, ISO 27001 and OWASP.\n\nDevelop and maintain security standards, SOPs, hardening guidelines, assessment methodologies, technical documentation and operational runbooks.\n\nContinuously identify opportunities to automate preventive and detective security controlsand improve overall Cloud Security and DevSecOps maturity.\n\nParticipate in broader Information Security activitiesincluding vulnerability management, security assessments, incident investigations, security reviews, audit/compliance.\n\nSkills\nTo be successful in this role, you should have:\nStrong hands-on understanding of at least one major public cloud platform, preferably AWS, with working knowledge of Azure and/or GCPbeing an advantage.\n\nGood understanding of cloud security across IAM, compute, storage, networking, encryption, logging and monitoring.\n\nKnowledge of cloud security services such as AWS IAM/IAM Identity Center, Security Hub, AWS Config, CloudTrail, KMS and EKS, or equivalent services in Azure/GCP.\n\nHands-on understanding of CI/CD and DevSecOps security, including SAST, SCA, DAST, secrets scanning, IaC scanning and container/image security.\n\nExperience with CI/CD technologies such as Jenkins, GitHub Actions, ArgoCD, Bitbucket Pipelines or equivalent platforms.\n\nWorking knowledge of Terraform and Infrastructure-as-Code security.\n\nGood understanding of Docker, Kubernetes, Kubernetes RBAC, container security and cluster hardening.\n\nExperience with scripting and automation using Python, Bash or similar languages.\n\nStrong understanding of IAM, least privilege, MFA, privileged access, credential management and access governance.\n\nUnderstanding of CSPM, KSPM, CWPP and CNAPPconcepts.\n\nKnowledge of cloud/network security concepts including VPC/VNet, Security Groups, firewalls, WAF, TLS/mTLS and private/public connectivity.\n\nExperience with security monitoring, alert triage and threat/exposure-management platforms such as CloudSEK or equivalent solutions.\n\nExposure to security tooling such as Snyk or equivalent SAST/SCA, CSPM, container and infrastructure security solutions.\n\nUnderstanding of vulnerability management, risk-based remediation and security incident investigation.\n\nKnowledge of security standards and frameworks including CIS Benchmarks, NIST, PCI DSS, ISO 27001 and OWASP.\n\nAbility to independently analyse security findings, document security risks and provide clear and practical remediation recommendations to technical stakeholders.\n\nExperience and Qualifications\n3-6 years of relevant experiencein Cloud Security, DevSecOps, Infrastructure Security, Platform Security or related security engineering roles.\n\nStrong hands-on technical experience in cloud security, infrastructure security, vulnerability management and security automation.\n\nBachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering or a related discipline, or equivalent relevant industry experience.\n\nRelevant cloud/security certifications such as AWS Certified Security - Specialty, AWS Solutions Architect, Certified Kubernetes Security Specialist (CKS), Microsoft Azure Security Engineer, Google Professional Cloud Security Engineer or equivalentare an added advantage.","description_format":"text","description_chars":8869,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Cards & Card Issuing","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-11-05T14:57:31Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.15,"p_room":0.28,"age_days":808,"expected_fill_days":45,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/zeta-devsecops-engineer-ii","json_url":"https://alion.io/job/zeta-devsecops-engineer-ii.json","meta":{"generated_at":"2026-11-07T04:19:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10562,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":95345},"rest":"https://alion.io/mcp/rest/get_company?id=95345"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzeta-devsecops-engineer-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzeta-devsecops-engineer-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzeta-devsecops-engineer-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zeta-devsecops-engineer-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzeta-devsecops-engineer-ii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3812065}},{"tool":"search_jobs","arguments":{"company":"zeta.tech","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3812065},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}