Senior DevSecOps Engineer
BengaluruFull-time4–7 yrsPosted 2 months ago
Mid-level DevOps and cloud role at Nextwebi IT Solutions in Bengaluru. Needs 4+ years.
About the role
We are looking for a skilled Senior SecOps Engineer to join our Security team. The ideal candidate will take ownership of offensive security initiatives, lead penetration testing activities, and contribute to building a strong security-first culture across engineering teams. This role combines traditional Application Security (AppSec) with emerging AI security challenges.
What you'll do
- Lead and execute end-to-end penetration testing across web applications, APIs, internal services, and cloud infrastructure
- Design and conduct red team exercises that simulate real-world adversarial scenarios
- Perform threat modeling for new product features and architectures before deployment
- Develop custom exploits, scripts, and tools to improve testing coverage and repeatability
- Prepare clear and actionable penetration testing reports for engineering teams and management
What you need
- CI/CD
- AWS
- GCP
- Python
- Bash
- Azure
Good to have
- ISO 27001
- Penetration testing
- LLMs
- Machine learning
- OWASP
- Cloud security