1 day ago
Hyderābād, IndiaStaff+
Responsibilities
- Implement, operate, and enforce security controls across CI/CD pipelines, cloud platforms, and application environments.
- Configure and maintain secure baseline templates, pipeline standards, and automation frameworks.
- Integrate and manage security tools within the software development lifecycle.
- Manage IAM using Entra ID, RBAC, and platform security controls.
- Perform access provisioning, modification, and de-provisioning activities.
- Automate onboarding and security workflows, including ServiceNow integrations.
- Troubleshoot CI/CD, identity, and security-tool issues.
- Monitor security control coverage, pipeline health, and vulnerability remediation metrics.
- Support audits, compliance assessments, attestations, and evidence collection.
- Investigate security incidents and assist with incident response.
- Create operational documentation, SOPs, and implementation guides.
- Drive continuous improvement in DevSecOps automation, tooling, and processes.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or 10 years of equivalent hands-on professional experience.
- Strong knowledge of DevSecOps and Secure SDLC practices.
- Experience securing CI/CD pipelines and implementing security controls.
- Proficiency in Python, Java, Shell Scripting, or similar languages.
- Hands-on experience with SAST, DAST, SCA, and secrets-scanning tools.
- Understanding of secure coding practices and application security.
- Experience with AWS, Azure, or GCP and cloud security controls.
- Knowledge of Terraform and Ansible for infrastructure as code.
- Strong understanding of IAM, authentication, authorization, and least-privilege principles.
- Experience with Docker and Kubernetes.
- Knowledge of networking fundamentals and secure architecture design.
- Experience in vulnerability management, remediation, and risk mitigation.
- Strong troubleshooting, analytical, and problem-solving skills.
- Experience with logging, monitoring, and security event analysis.
Benefits
- Career paths, internal opportunities, and personalized career guidance from company leaders.
- Wellness benefits including health checks, telemedicine, insurance top-ups, elder care, partner coverage, and new-parent support through flexible work.
- Opportunities to work on technology and engineering projects with industry leaders and on societal and environmental challenges.
Tech Stack
Categories
About Capgemini
Capgemini is a global IT services and consulting firm that delivers strategy, cloud, AI, software engineering, and managed services to large enterprises and public-sector clients. Founded in 1967 and headquartered in Paris, it is publicly traded on Euronext Paris and operates in 50+ countries. The group expanded its engineering capabilities by acquiring Altran in 2020, now operating as Capgemini Engineering.