Devsecops Engineer at Mphasis in Pune, Chennai

Candidates with relevant skill-set can apply using below link:-

https://r.ripplehire.com/s/cZI2h

Job Summary:

We are seeking a highly skilled DevSecOps Senior Engineer to join our dynamic team as a Process Lead. The ideal candidate will play a pivotal role in integrating security practices within the DevOps process, ensuring that security is embedded throughout the software development lifecycle. This position requires a strong understanding of both development and operations, with a focus on automating security processes and enhancing the overall security posture of our applications.

Responsibilities:

• Lead the implementation of DevSecOps practices across various projects, ensuring security is a fundamental component of the development process.
• Collaborate with development, operations, and security teams to design and implement secure CI/CD pipelines.
• Conduct security assessments and vulnerability scans, and provide actionable insights to development teams.
• Automate security testing and compliance checks within the CI/CD pipeline.
• Develop and maintain security policies, standards, and guidelines to ensure compliance with industry regulations.
• Provide training and support to development teams on secure coding practices and security tools.
• Monitor and respond to security incidents, ensuring timely resolution and reporting.
• Stay updated on the latest security trends, threats, and technologies to continuously improve security practices.

Mandatory Skills:

• Strong expertise in DevOps practices and tools, including CI/CD, containerization, and orchestration.
• Proficient in security tools and technologies, such as static and dynamic application security testing (SAST/DAST), vulnerability management, and security information and event management (SIEM).
• Experience with cloud platforms (AWS, Azure, GCP) and their security features.
• Solid understanding of application security principles and best practices.
• Familiarity with scripting and automation tools (e.g., Python, Bash, Ansible).
• Excellent problem-solving skills and the ability to work under pressure.

Preferred Skills:

• Experience with infrastructure as code (IaC) tools such as Terraform or CloudFormation.
• Knowledge of compliance frameworks (e.g., GDPR, PCI-DSS, ISO 27001).
• Familiarity with Agile methodologies and project management tools.
• Certifications in security (e.g., CISSP, CISM, CEH) or DevOps (e.g., AWS Certified DevOps Engineer).

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Strong analytical and communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Proven ability to work collaboratively in a team-oriented environment.