Lead Engineer - II_DevSecOps
Posted Updated
Description
Job Summary
Responsibilities
Experience
Location
Educational Qualifications
Skills
Mandatory Technical Skills
Good to Have Skills
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
As a Lead Engineer - II - DevSecOps, you will be a part of a DevSecOps and AI-assisted security team, leveraging advanced static application security testing (SAST), software composition analysis (SCA), and emerging AI-powered security capabilities to streamline software delivery, improve developer productivity, and strengthen application security throughout the SDLC.
Responsibilities
- Perform advanced application security analysis using AI-assisted security tools, SAST, SCA, dependency analysis, and software supply chain security solutions.
- Partner with application teams to implement secure software delivery practices and embed security throughout the SDLC.
- Develop and automate security controls, policies, quality gates, and remediation workflows within CI/CD pipelines to enable secure and compliant software delivery.
- Leverage AI-powered tools and coding assistants to identify vulnerabilities, generate remediation recommendations, and accelerate code remediation efforts.
- Analyze and prioritize security findings, work with development teams to reduce risk, and improve application security posture.
- Evaluate and implement emerging AI-driven security capabilities and automation solutions to strengthen enterprise security and improve developer productivity.
Experience
- 8 - 14 Years
Location
- Mumbai
- Pune
- Hyderabad
- Chennai
Educational Qualifications
- Engineering Degree - BE/ME/BTech/MTech/BSc/MSc.
- Technical certification in multiple technologies is desirable.
Skills
Mandatory Technical Skills
- DevSecOps, Application Security, Secure SDLC
- SAST, SCA, DAST, Vulnerability Management
- Software Supply Chain Security and Dependency Analysis
- AI-powered Security Tools, LLMs, AI Agents, MCP Servers
- GitHub Copilot, Claude Code, Codex or similar AI coding assistants
- GitHub Actions, Jenkins, Azure DevOps, GCP Cloud Build
- Security Tools: SonarQube, Nexus IQ, GitHub Advanced Security, AppScan, Prisma, Qualys
- CI/CD Security Automation and Security Controls
- Secure Coding Practices and Vulnerability Remediation
- Strong stakeholder management and collaboration with development teams
Good to Have Skills
- AWS/Azure/GCP Security
- Kubernetes and Container Security
- Terraform/Infrastructure as Code
- Threat Modeling and Security Architecture Reviews
- Python, Shell Scripting, PowerShell
- SIEM and Compliance Frameworks (SOC2, ISO 27001, NIST)
- GenAI Security, AI Governance, AI Model Security
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Skills
- Agentic AI
- AI
- Automation
- AWS
- Azure
- Azure DevOps
- Bash
- CI/CD
- Claude Code
- Cloud
- Container Security
- DAST
- DevOps
- DevSecOps
- GCP
- Generative AI
- GitHub
- GitHub Actions
- Github Copilot
- Infrastructure as Code
- ISO 27001
- Jenkins
- Kubernetes
- LLM
- MCP
- Nist
- PowerShell
- Python
- Qualys
- SAST
- SDLC
- Secure Coding
- SIEM
- SOC 2
- SonarQube
- Stakeholder Management
- Terraform
- Threat Modeling
- Vulnerability Management