Sr DevSecOps Engineer
HyderabadFull-time5–8 yrsPosted 5 days ago
Senior DevOps and cloud role at Standard & Poors South Asia Services in Hyderabad. Needs 5–8 years.
About the role
Senior DevSecOps Engineer – Enterprise Developer Platform and Toolchain The Enterprise Developer Platform & Toolchain team owns the platforms, tools and capabilities that support software engineers across S&P Global. As a globally distributed team, we build services, policies and automated controls that secure the developer toolchain while keeping platforms simple, consistent and engineer friendly.
What you'll do
- Define and implement baseline security policies and automated guardrails across source control and CI/CD environments
- Integrate, manage and tune code quality and application security tools, including SonarQube, GitHub Advanced Security (GHAS), Checkmarx and Wiz
- Triage security findings, prioritise vulnerabilities by risk and track remediation against service-level agreements (SLAs)
- Establish governance for credentials, secrets and non-human identities across the developer toolchain
- Harden build infrastructure and software supply chain controls, including artifact management with JFrog Artifactory/Xray
What you need
- CI/CD
- AWS
- Terraform
- Python
- Bash
- IAM
Good to have
- Kubernetes
- Splunk
- SIEM
- Git
- Cloud security
- Node.js