We are seeking a skilled DevSecOps Engineer to join our team in Bengaluru. This role involves owning security across the software development lifecycle (SDLC) to ensure the highest standards of operational security and compliance.
Responsibilities:
- Harden CI/CD pipelines using GitHub Actions, implementing OIDC and Workload Identity Federation.
- Secure cloud infrastructure on Google Cloud Platform (GCP) with least-privilege IAM policies, Secret Manager, Cloud KMS, and VPC controls.
- Ensure container and supply chain integrity through image scanning and signing tools such as Cosign.
- Implement static application security testing (SAST) and secret scanning that enforce build failures on detection.
- Maintain and support security controls aligned with SOC 1, SOC 2, and ISO 42001 standards.
- Work closely with engineering teams to protect sensitive financial data and maintain customer trust.
Experience: 4 - 8 years in DevSecOps or related security engineering roles.
Location: Bengaluru
Salary: 40 - 60 LPA
