DevSecOps Lead to lead the integration of security across every stage of the Software Development Lifecycle (SDLC). This role is responsible for embedding security into development and operations by designing secure CI/CD pipelines, automating security controls, and implementing cloud security best practices. The successful candidate will ensure applications and infrastructure are resilient, compliant, and protected against evolving cyber threats while maintaining high standards of performance and scalability.As a technical leader, the DevSecOps Lead will work closely with Engineering, DevOps, Security, Infrastructure, and Product teams to establish a security-first culture. The role involves driving DevSecOps strategy, implementing Infrastructure as Code (IaC) security, container and Kubernetes security, vulnerability management, compliance initiatives, and continuous security monitoring. The ideal candidate combines deep expertise in cloud platforms, automation, and cybersecurity with strong leadership and collaboration skills to deliver secure, scalable, and reliable enterprise solutions.

Roles & Responsibilities

• Lead the implementation of DevSecOps practices across software development and cloud operations, ensuring security is embedded throughout the Software Development Lifecycle (SDLC).
• Design, build, and maintain secure CI/CD pipelines while integrating automated security testing, code scanning, and vulnerability management into development workflows.
• Implement Infrastructure as Code (IaC) security using Terraform, CloudFormation, Ansible, or similar automation tools to ensure secure and scalable cloud infrastructure.
• Manage and secure containerized environments using Docker and Kubernetes, implementing best practices for container security and orchestration.
• Secure cloud infrastructure across AWS, Microsoft Azure, and Google Cloud Platform (GCP) by implementing cloud security controls, monitoring, and governance.
• Conduct security architecture reviews, threat modeling, risk assessments, and vulnerability analysis to identify and mitigate potential security risks.
• Collaborate with software development, DevOps, infrastructure, and product teams to remediate security vulnerabilities and promote secure application development practices.
• Ensure compliance with security frameworks and regulatory standards such as ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR, and other applicable industry requirements.
• Implement Identity and Access Management (IAM), secrets management, encryption, Zero Trust security principles, and privileged access controls across enterprise environments.
• Monitor security events, manage incident response activities, coordinate remediation efforts, and continuously improve the organization’s overall security posture.
• Mentor DevOps engineers and development teams on secure coding standards, cloud security, DevSecOps methodologies, and cybersecurity best practices.
• Evaluate, recommend, and implement emerging DevSecOps tools, automation technologies, and security solutions to enhance operational efficiency, resilience, and compliance.

Required Skills

• Strong experience in DevSecOps, DevOps, Cloud Security, or Cybersecurity.
• Expertise with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps, or Bamboo.
• Hands-on experience with Docker, Kubernetes, Helm, and container orchestration.
• Experience with cloud platforms including AWS, Azure, or Google Cloud Platform (GCP).
• Proficiency in Infrastructure as Code (Terraform, CloudFormation, Ansible, or Pulumi).
• Experience with security tools such as SonarQube, Snyk, Checkmarx, Veracode, Prisma Cloud, Aqua Security, Trivy, or OWASP ZAP.
• Strong understanding of IAM, encryption, secrets management, API security, and network security.
• Knowledge of Linux administration, scripting (Python, Bash, PowerShell), and automation.
• Familiarity with SIEM, vulnerability management, and incident response.
• Excellent leadership, communication, and stakeholder management skills.

Qualifications

• BE/B.TECH in Computer Science, Information Technology, Cybersecurity, or a related field.
• Exp -8–15 Years
• Certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), Certified Kubernetes Administrator (CKA), CISSP, CEH, CompTIA Security+, Microsoft Azure Security Engineer, or Google Professional Cloud Security Engineer are preferred.
• Experience in regulated industries such as BFSI, Healthcare, FinTech, or eCommerce is an advantage.

Key Competencies

• DevSecOps Leadership
• Cloud Security
• Application Security
• CI/CD Automation