DevSecOps Engineer
3 days ago
Role Overview
We are seeking a motivated Vulnerability Remediation & DevSecOps Engineer to join our security team. The ideal candidate will have hands-on experience with vulnerability management, secure coding, container security, and CI/CD pipeline integration. This role requires strong collaboration with development and DevOps teams to ensure timely remediation of vulnerabilities and adoption of secure development practices.
Key Responsibilities
Vulnerability Triage & Risk Assessment Review and analyse vulnerability findings from tools (e.g., Snyk, Trivy, Aqua, Qualys, etc.).
Prioritize vulnerabilities based on severity, exploitability, and business impact.
Maintain a backlog of security issues and actively track remediation progress.
Code-Based Remediation Support Partner with developers to remediate vulnerabilities across multiple languages including TypeScript, Python, JavaScript, Java, Ruby, Go, HCL, Shell, and SQL variants.
Provide secure coding guidance and implement secure development patterns.
Assist in refactoring insecure legacy code.
Container Security & Infrastructure Hardening Remediate vulnerabilities in Docker images, base OS layers, and Kubernetes (AKS) configurations.
Harden CI/CD pipelines and container orchestration using IaC (Terraform, HCL).
Manage and maintain secure container images in registries.
Pipeline Integration & Automation Integrate security tools into CI/CD workflows (e.g., GitHub Actions, Azure DevOps).
Automate remediation suggestions and enforce policy gates for critical vulnerabilities. Write scripts and automation in Shell, Python, and Go for security enforcement.
Cross-Team Collaboration Act as a bridge between development, security, and DevOps teams.
Host working sessions and knowledge transfers on remediation strategies and DevSecOps best practices.
Drive secure SDLC adoption across engineering teams.
Documentation & Reporting Maintain clear documentation on remediation strategies, architecture decisions, and tool configurations.
Provide metrics and reports to leadership on vulnerability trends and remediation velocity.
Qualifications & Skills
13 years of hands-on experience in vulnerability management, remediation, or DevSecOps.
Familiarity with vulnerability scanning tools (Snyk, Trivy, Aqua, Qualys, etc.)
Experience with multiple programming languages (TypeScript, Python, JavaScript, Java, Ruby, Go, SQL, Shell scripting).
Knowledge of container security, Kubernetes (AKS preferred), and IaC (Terraform, HCL).
Experience with CI/CD platforms (GitHub Actions, Azure DevOps).
Strong understanding of secure coding practices and secure SDLC.
Excellent problem-solving, communication, and collaboration skills.
Location: Remote- Bengaluru,Hyderabad,Delhi / NCR,Chennai,Pune,Kolkata,Ahmedabad,Mumbai
-
Devsecops Engineer
5 days ago
Pune, Maharashtra, India Capgemini Full time ₹ 20,00,000 - ₹ 25,00,000 per yearRole OverviewWe are seeking a highly experienced AWS DevSecOps Engineer to lead the design, implementation, and optimization of secure cloud infrastructure and CI/CD pipelines. This role demands deep expertise in AWS services and DevSecOps practices, with a strong focus on automation, scalability, and security integration across the software development...
-
Devsecops Engineer
4 days ago
Pune, India Whatjobs IN C2 Full timeAbout the project: We’re seeking an experienced DevSecOps Engineer to take ownership of our Client's Internal Developer Platform (IDP) based on Port.Io. In this role, you’ll empower engineering teams through self-service capabilities, standardized deployment templates, automation, and built-in security practices. You’ll be at the intersection of...
-
DevSecOps Engineer
4 days ago
Pune, India Maxima Consulting Full timeAbout the project:We’re seeking an experienced DevSecOps Engineer to take ownership of our Client's Internal Developer Platform (IDP) based on Port.io. In this role, you’ll empower engineering teams through self-service capabilities, standardized deployment templates, automation, and built-in security practices. You’ll be at the intersection of...
-
DevSecOps Engineer
5 days ago
Pune, India Maxima Consulting Full timeAbout the project:We’re seeking an experienced DevSecOps Engineer to take ownership of our Client's Internal Developer Platform (IDP) based on Port.io. In this role, you’ll empower engineering teams through self-service capabilities, standardized deployment templates, automation, and built-in security practices. You’ll be at the intersection of...
-
DevSecOps Engineer
1 week ago
Pune, India Maxima Consulting Full timeAbout the project:We’re seeking an experienced DevSecOps Engineer to take ownership of our Client's Internal Developer Platform (IDP) based on Port.io. In this role, you’ll empower engineering teams through self-service capabilities, standardized deployment templates, automation, and built-in security practices. You’ll be at the intersection of...
-
Devsecops Engineer
1 day ago
Pune, Maharashtra, India Checkmarx Full time ₹ 12,00,000 - ₹ 36,00,000 per yearWho are we?Checkmarx is the leader in application security and ensures that enterprises worldwide can secure their application development from code to cloud. Our consolidated platform and services address the needs of enterprises by improving security and reducing TCO, while simultaneously building trust between AppSec, developers, and CISOs. At Checkmarx,...
-
DevSecOps Engineer
7 days ago
Pune, India Maxima Consulting Full timeAbout the project:We’re seeking an experienced DevSecOps Engineer to take ownership of our Client's Internal Developer Platform (IDP) based on Port.io. In this role, you’ll empower engineering teams through self-service capabilities, standardized deployment templates, automation, and built-in security practices. You’ll be at the intersection of...
-
DevSecOps Engineer
1 week ago
Pune, India Maxima Consulting Full timeAbout the project: We’re seeking an experienced DevSecOps Engineer to take ownership of our Client's Internal Developer Platform (IDP) based on Port.io. In this role, you’ll empower engineering teams through self-service capabilities, standardized deployment templates, automation, and built-in security practices. You’ll be at the intersection of...
-
DevSecOps Engineer
1 week ago
Pune, India Maxima Consulting Full timeAbout the project: We’re seeking an experienced DevSecOps Engineer to take ownership of our Client's Internal Developer Platform (IDP) based on Port.io. In this role, you’ll empower engineering teams through self-service capabilities, standardized deployment templates, automation, and built-in security practices. You’ll be at the intersection of...
-
DevSecOps Engineer
1 week ago
Pune, India Maxima Consulting Full timeAbout the project:We’re seeking an experienced DevSecOps Engineer to take ownership of our Client's Internal Developer Platform (IDP) based on Port.io. In this role, you’ll empower engineering teams through self-service capabilities, standardized deployment templates, automation, and built-in security practices. You’ll be at the intersection of...
