Hiring for DevSecOps Lead Position (India)

Hiring for DevSecOps Lead Position (India) Company: Growing Careers Job Location: India Employment Type: Full-time Key Responsibilities Secure SDLC & CI/CD Embed security checks into every pipeline: SAST, DAST, SCA, secrets scanning, container and IaC scanning. Define security gates and quality thresholds that block risky releases without slowing delivery. Secure the software supply chain: dependency management, image signing, SBOMs and artifact provenance. Product & Application Security Run threat modelling and security design reviews for recent features, services and APIs. Define secure coding standards, authentication/authorization patterns and encryption practices for product teams. Coordinate penetration tests, smart-contract audits and bug bounty findings; track remediation to closure. Cloud Workload Security Secure Kubernetes, container and serverless workloads across AWS, Azure and GCP. Manage secrets and keys (Vault, KMS, Key Vault) and enforce least-privilege IAM for applications. Run cloud security posture management and policy-as-code guardrails with the Cloud & IT Infrastructure team. Compliance Automation Translate SOC 2, ISO 27001, PCI-DSS, GDPR and DPDP Act requirements into technical controls for our products. Automate evidence collection and continuous compliance monitoring; support external audits. Maintain data classification, logging, retention and privacy controls in our applications. Vulnerability Management & Incident Response Own vulnerability triage and fix SLAs across code, dependencies, containers and cloud workloads. Set up security logging and SIEM alerts for products; lead investigation of product security incidents. Enablement & Leadership Train developers on secure coding and run security champions across product teams. Answer client security questionnaires and support enterprise security reviews. Hire and mentor security engineers as the function grows. 3. Skill Set Required Dev SecOps Tooling: Sonar Qube, Snyk, Checkmarx, OWASP ZAP/Burp Suite, Trivy, Checkov, Gitleaks CI/CD: Git Hub Actions, Git Lab CI, Jenkins or Azure Dev Ops Application Security: OWASP Top 10 and API Top 10, OAuth2/OIDC, JWT, encryption, threat modeling (STRIDE) Cloud & Container Security: AWS/Azure/GCP security services, Kubernetes security, Wiz/Prisma Cloud, OPA/Kyverno Secrets & Keys: Hashi Corp Vault, AWS KMS/Secrets Manager, Azure Key Vault Compliance: SOC 2, ISO 27001, PCI-DSS, GDPR, DPDP Act; compliance automation (Vanta/Drata or similar) Monitoring & SIEM: Splunk, Microsoft Sentinel, ELK, AWS Security Hub Coding & Scripting: Python, Bash and ability to read Go, Java, Java Script/Type Script or Solidity code .