Location : Bangalore

Budget : Upto 11 LPA

Experience : 6+ Years

Overview:

As a Senior DevSecOps Consultant, you will play a critical role in ensuring the security, reliability, and efficiency of cloud-based systems. Your expertise in both Azure and AWS, along with strong DevOps practices, will contribute to creating a secure and streamlined digital environment for our clients.

Primary Responsibilities:

·       Design, develop, and implement secure and automated CI/CD pipelines using Azure DevOps or AWS Code Pipeline.

·       Integrate security best practices into all stages of the SDLC, including code reviews, security testing, and vulnerability scanning.

·       Proactively identify, assess, and remediate security vulnerabilities in applications and infrastructure.

·       Automate security tasks using scripting languages and tools like Python, Bash, or PowerShell.

·       Configure and manage cloud security services, such as Azure Security Centre or AWS Security Hub.

·       Monitor and analyze security logs to identify and respond to security incidents.

·       Collaborate with developers and security engineers to improve the security posture of the organization.

·       Stay up-to-date on the latest security threats and vulnerabilities.

·       Document security processes and procedures.

Must-Have Skills:

·       6-8 years of experience in DevSecOps or a related field.

·       Proven experience in designing and implementing secure and automated CI/CD pipelines (Azure DevOps or AWS Code Pipeline preferred).

·       In-depth knowledge of DevOps principles and methodologies.

·       Strong understanding of security best practices and controls.

·       Experience with security testing tools and techniques (SAST, DAST, etc.).

·       Proficiency in scripting languages (Python, Bash, or PowerShell).

·       Experience with cloud platforms (Azure or AWS preferred).

·       Excellent communication and collaboration skills.

·       Ability to work independently and as part of a team.

·        

Good-to-Have Skills:

·       Experience with containerization technologies (Docker, Kubernetes).

·       Experience with infrastructure as code (Terraform, CloudFormation).

·       Experience with API security.

·       Experience with security incident response (SIEM, SOAR).

·       Experience with compliance frameworks (SOC 2, HIPAA, etc.).

·       Experience with configuration management tools (Ansible, Chef).