Cyber Security DevSecOps Engineer

About Quess IT Staffing: Hiring the right professionals in the IT industry can be a challenging endeavor. At Quess IT Staffing, we specialize in connecting organizations with IT talent who not only possess the skills needed but also align with the client organization's vision and goals. This commitment has helped us become one of the largest and most sought-after IT staffing companies in India. Our professional staffing solutions are strategically designed to help businesses secure highly qualified candidates, whether seasoned experts, niche specialists, or those with unique technical skills. Beyond staffing, we provide tailored IT solutions including Digital Workplace Services, Cloud & Datacenter Services, and Managed Network Services, ensuring your infrastructure is robust and operations run seamlessly. As India’s largest and a global leader in staffing and workforce solutions, Quess empowers businesses to boost productivity through deep domain expertise and a future-ready workforce powered by AI-driven digital platforms. With a strong presence across 8 countries, a workforce exceeding 460,000 professionals, and over 3,000 clients worldwide, Quess has grown from a start-up to an industry powerhouse in just 17 years, delivering transformative impact across sectors. DevSecOps Security Engineer — with Splunk Expertise Experience : 6+ Years Job Type: Work from Office Indian Shift Timing: 2:00 PM - 11:00 PM IST Immediate Joiner The DevSecOps Security Engineer will embed security into modern delivery for our customer environment , while also providing Splunk engineering support to our internal team. Based in Chennai, India, this hands-on role partners with local Engineering/DevOps to secure CI/CD pipelines, Kubernetes workloads, and runtime environments in alignment with enterprise standards. Experience with API and Bot security is a plus. • Customer DevSecOps enablement (pipelines, IaC guardrails, Kubernetes hardening, runtime detection/response, observability) • Internal Splunk SME work (use cases, onboarding, dashboards, compliance reporting) • 80% Customer DevSecOps / ~20% Internal Splunk (subject to business needs) Pipeline Security: enforce quality gates and break-glass workflows. Implement policy-as-code for Terraform/Helm/manifests; Kubernetes Security: implement least-privilege RBAC, network policies, image signing/attestations, and runtime defenses. API & Bot Security (Strongly Preferred): enforce WAAP/edge/CDN policies and rate limiting; deploy bot detection/mitigation and fraud signals. Runtime Monitoring: Deploy vulnerability, misconfiguration, drift, and anomaly detection across clusters and services. On-Call & Escalations: Configure PagerDuty and ticketing (Jira/ServiceNow); IR Enablement: Partner with SOC/IR for evidence collection, triage, post-incident reviews, and improvement actions. C) Splunk (Internal Team Support) Integrate new data sources, perform field extractions, apply lifecycle policies; Deliver detection/operations dashboards and automated compliance/audit reports. Platform Care: Support upgrades, performance tuning, license utilization, and app maintenance. Provide weekly status, risk/issue tracking, and stakeholder updates (customer + internal). Bachelor’s in Computer Science, Cybersecurity, or related field; Hands-on DevSecOps experience across CI/CD, Kubernetes, and cloud-native platforms. Strong IaC security and policy-as-code (Terraform/Helm/Git-based guardrails). Kubernetes security (CIS, admission controls, image signing/attestations, RBAC, Pod Security admission, network policies). on-call tooling (PagerDuty) . Splunk (Required): data onboarding, SPL, dashboards, correlation rules, compliance reporting, and performance tuning. familiarity with SOAR, Jira/ServiceNow. Experience with CNAPP/CSPM platforms (Prisma Cloud and/or Wiz). API & Bot Security (Strongly Preferred): API discovery/cataloging; WAAP/edge/CDN policies; bot detection/mitigation & fraud signals. Akamai/Cequence experience is a plus.