Lead DevSecOps Engineer
S&P Global4 days ago
Hyderābād, IndiaStaff+
Responsibilities
- Own the SDLC security strategy, policy framework, roadmap, and audit-aligned security controls.
- Lead, mentor, and grow a team of DevSecOps engineers and drive developer toolchain hardening programs.
- Define, implement, and automate security policies and guardrails across source control and CI/CD environments.
- Integrate and manage application security, code quality, cloud security, secrets, identity, artifact, and monitoring tools.
- Secure AWS-based developer platform infrastructure, including compute, storage, IAM, containers, and infrastructure as code.
- Govern vulnerabilities, exceptions, remediation SLAs, credentials, secrets, non-human identities, AI-assisted development, and endpoint security.
- Lead security architecture reviews and incident response for toolchain security events.
- Report security posture, risk, remediation progress, and audit evidence to senior stakeholders.
Requirements
- 8+ years of experience in DevSecOps, application security, or security engineering, including leading teams or programs.
- Experience defining security policies and standards, translating them into technical enforcement, and driving adoption across large organizations.
- Strong knowledge of SOX, SOC 2, ISO 27001, identity governance, and software development lifecycle security.
- Deep expertise securing enterprise-scale CI/CD pipelines and understanding pipeline and source control threats.
- Hands-on experience with GitHub Enterprise Cloud, GitHub Actions, runners, rulesets, policies, SAST, SCA, secrets scanning, and cloud security tooling.
- Knowledge of IAM concepts including SSO, RBAC, and least privilege.
- Proficiency with Terraform, CloudFormation, or CDK and familiarity with configuration management tools.
- Experience with AWS compute, networking, storage, IAM, and ECS/EKS container orchestration.
- Strong scripting and automation skills in Python or Bash; familiarity with TypeScript and Node.js.
- Understanding of CMDBs and ITIL-aligned change management, including approvals and audit trails.
- Awareness of AI tool governance, developer endpoint security, and MDM.
- Bachelor’s degree or higher in Computer Science, Information Security, or a related technology field, or equivalent practical experience.
- Preferred qualifications include GitHub Copilot, Cursor, developer agents/MCP, Backstage plugins, OPA, Sentinel, SLSA, SBOM generation, artifact signing, and relevant security or cloud certifications such as CISSP, CISM, AWS Certified Security – Specialty, AWS Solutions Architect, AWS DevOps Engineer, CKA, or CKAD.
Benefits
- Health care coverage and wellness benefits.
- Generous flexible time off and downtime.
- Continuous learning, training, knowledge sharing, and continuing education support.
- Retirement planning, competitive pay, financial wellness programs, and a company-matched student loan contribution.
- Family-friendly benefits, retail discounts, and referral incentive awards.
- Support for security certifications including CISSP, CISM, and CSSLP.