DevSecOps Engineer

Job Title: DevSecOps Engineer - Integration Specialist

Description: We are seeking a skilled DevSecOps Engineer to join our team at ISPG Technologies India Private Limited. The ideal candidate will play a critical role in integrating security into every phase of the software development lifecycle (SDLC). You will collaborate with development, operations, and security teams to ensure secure coding practices, infrastructure security, and automation of security processes.

• Implement, manage, and enhance DevSecOps processes, including integrating security practices into CI/CD pipelines.
• Perform vulnerability assessments and security audits of software and infrastructure.
• Collaborate with software engineers and DevOps teams to ensure secure coding practices.
• Develop, configure, and manage automated security tools, such as static/dynamic code analysis tools, intrusion detection/prevention systems, and SIEM.
• Design and implement security controls to protect applications, data, and infrastructure.
• Monitor security incidents, respond to threats, and ensure timely remediation.
• Automate security processes such as patch management, incident response, and compliance checks.
• Ensure compliance with security standards, including SOC 2, ISO 27001, PCI DSS, and others.

Key Skills and Requirements: Bachelor's degree in Computer Science, Information Security, or a related field. 4+ years of experience in DevSecOps, security engineering, or related roles. Strong knowledge of CI/CD pipelines and tools like Jenkins etc. Experience with cloud security on platforms like AWS, Azure, or GCP. Familiarity with security testing tools (e.g., OWASP ZAP, Burp Suite, Nessus, etc.).