DevSecOps Engineer
BDO India
Noida, Uttar Pradesh, India5h agovia LinkedIn
About the Role
A full-time, on-site DevSecOps Engineer role based in Noida, focusing on integrating security practices into every stage of the software development and deployment lifecycle.
Key Responsibilities
- Design, implement, and maintain secure CI/CD pipelines.
- Automate security testing.
- Monitor application and infrastructure security using appropriate tools.
- Collaborate with development, operations, and security teams to:
- Identify vulnerabilities.
- Implement remediation measures.
- Enforce security policies and standards.
- Manage configuration and infrastructure as code.
- Optimize system performance and reliability.
- Ensure compliance with regulatory and organizational security requirements.
- Contribute to documentation, knowledge sharing, and continuous improvement of security and DevOps practices.
Requirements & Tech Stack
- Hands-on experience in Software Development and Programming, with proficiency in at least one modern language (e.g., Python, Java, C#, Go).
- Applied knowledge of Object-Oriented Programming (OOP) principles and design patterns.
- Experience in Back-End Web Development, including APIs, microservices, and secure integration with databases and cloud services.
- Practical experience with DevOps and DevSecOps tools (e.g., Jenkins, GitLab CI, Azure DevOps, Kubernetes, Docker, Terraform, Ansible).
- Familiarity with security testing tools and practices (e.g., SAST, DAST, dependency scanning, secret scanning, vulnerability management).
- Understanding of cloud platforms (e.g., AWS, Azure, GCP) and their security controls, IAM, networking, and container orchestration.
Qualifications
- Strong foundation in Computer Science, including data structures, algorithms, operating systems, and networks.
- Ability to work collaboratively in cross-functional teams, communicate clearly, and document processes and standards.
- Bachelor’s degree in Computer Science, Information Technology, or a related field.
- Relevant security or cloud certifications are a plus (e.g., CISSP)