Devsecops Engineer at Cloudxtreme in Hybrid - Pune

Primary Skill DevSecOps.

Secondary Skill - Azure DevOps, PowerShell/YAML

Location – Pune

Level – SA level CWR

1. Exp: 5 to 8 years (Relevant 4+ years)
2. Notice Period : Immediate to 15 days Only

JD:

•Strong experience as a DevOps engineer.
• Experience in driving DevSecOps adoption and defining best practice, and guiding engineers to adhere to these.
•Experience designing and implementing CI/CD pipelines.
• Experience in defining and implementing logging and monitoring strategies.
•Experience with GitLab, Azure, Azure Key Vault, Infrastructure as Code/Terraform, Docker/Kubernetes and PowerShell/YAML.
•Experience defining and implementing security requirements.
•Agile, Continuous Delivery and DevOps practices are part of your DNA.
•Good communication skills – both written and verbal.
•Strong analytical and problem-solving skills, you like to figure out how things work.
•Passion for learning and innovation.

• Security Automation: Automate security testing (SAST, DAST, SCA) and compliance checks within the CI/CD pipelines (Jenkins, GitLab, Azure DevOps) to proactively identify and mitigate vulnerabilities early in the process.
• Vulnerability Management: Conduct regular security assessments, vulnerability scanning, and penetration testing for web, mobile, and API applications, coordinating remediation efforts with development teams.
• Cloud and Infrastructure Security: Design, implement, and manage secure cloud-based environments (Azure) and containerized platforms (Docker, Kubernetes, OpenShift), ensuring secure configurations and least privilege access controls.
• Compliance and Governance: Establish and enforce security policies and procedures that comply with financial industry regulations (e.g., GDPR, FFIEC, MAS), generating detailed reports and metrics for leadership and auditors.
• Threat Modeling and Incident Response: Perform threat analyses for applications and infrastructure, contributing to cross-functional incident response efforts and post-mortem analysis to prevent future occurrences.