DevSecOps Engineer

About the role

The DevSecOps Engineer is responsible for integrating security practices into the software development lifecycle to enable secure, scalable, and compliant delivery of applications. This role leverages enterprise DevSecOps platforms—including Azure DevOps, GitHub, SonarQube, Sonatype, Fortify, Katalon, and OpenShift—to embed automated security, code quality, and compliance controls while supporting high-velocity software delivery.

What you'll do

• Integrate security controls and best practices into CI/CD pipelines using Azure DevOps and GitHub Actions
• Configure and enforce code quality and security gates leveraging SonarQube and Fortify
• Implement Software Composition Analysis (SCA) using Sonatype to detect and remediate open-source vulnerabilities
• Embed vulnerability detection, secrets scanning, and policy enforcement into development workflows
• Collaborate with development teams to remediate security findings and improve secure coding practices

What you need

• 5–9 years in devops & cloud
• CI/CD
• Kubernetes
• Azure
• PowerShell
• Python
• Bash
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CISSP
• CEH
• ISO 27001
• Git
• Test automation
• OWASP