DEVSECOPS ENGINEER

As a DEVSECOPS ENGINEER at CRED IT Solutions, you will be at the forefront of integrating security practices into our continuous integration and delivery pipelines, ensuring that every piece of code released is robust, compliant, and resilient against emerging threats. You will collaborate closely with development, operations, and security teams to design automated security testing frameworks, embed vulnerability scanning tools, and enforce policy-as-code across cloud and on‑premise environments. The role offers a dynamic work setting where innovative thinking is encouraged, allowing you to experiment with cutting‑edge technologies such as container orchestration, Infrastructure as Code, and AI‑driven threat detection. You will mentor junior engineers, contribute to knowledge‑sharing sessions, and drive continuous improvement initiatives that enhance the organization’s security posture while accelerating delivery cycles. Your impact will be measured not only by the reduction of risk but also by the empowerment of cross‑functional teams to adopt a security‑first mindset throughout the software development lifecycle.

Requirements:

• 5–6 years of hands‑on experience in DevSecOps, with a proven track record of integrating security tools into CI/CD pipelines.
• Strong proficiency with container platforms (Docker, Kubernetes) and Infrastructure as Code tools such as Terraform or Ansible.
• Deep understanding of security scanning solutions (Snyk, OWASP ZAP, Trivy) and experience implementing automated vulnerability remediation.
• Excellent problem‑solving abilities, effective communication skills, and a collaborative mindset for working across development, operations, and security teams.

Roles and Responsibilities:

• Design, implement, and maintain automated security testing and compliance checks within CI/CD pipelines.
• Develop and enforce security policies as code, ensuring consistent application across cloud and on‑premise infrastructures.
• Collaborate with development teams to embed secure coding practices and provide guidance on threat modeling.
• Monitor, analyze, and remediate vulnerabilities identified by scanning tools, prioritizing fixes based on risk assessment.
• Lead incident response drills and post‑mortem analyses to continuously improve security controls and response processes.
• Stay current with emerging security threats, industry standards, and best practices, and champion knowledge‑sharing initiatives within the organization.

Budget:

• Maximum Budget: ₹1,500,000 per year
• Job Type: Payroll
• Experience Range: 5–6 years