Sr DevSecOps Engineer
S&P Global1 day ago
Bengaluru, India +2 moreSenior
Responsibilities
- Define and implement security policies and automated guardrails across source control and CI/CD environments.
- Integrate, manage, and tune SonarQube, GitHub Advanced Security, Checkmarx, Wiz, and related security tools in developer workflows.
- Triage and prioritize security findings, track vulnerabilities through remediation, and manage service-level agreement requirements.
- Establish governance for credentials, secrets, and non-human identities across the developer toolchain.
- Harden build infrastructure and software supply chain controls, including JFrog Artifactory/Xray, software bills of materials, and artifact signing.
- Provision, secure, and optimize AWS services including EC2, ECS/EKS, Lambda, S3, IAM, and CloudFormation/CDK.
- Contribute to governance for AI-assisted development tools, developer agents, and developer endpoint security.
- Monitor sensitive configuration changes, implement alerting, and support audit and compliance activities.
- Partner with platform and engineering teams to automate security controls and drive adoption.
Requirements
- 5–8 years of experience in DevSecOps, application security, or security governance.
- Experience designing and automating enterprise-scale CI/CD pipelines and understanding source control security and common pipeline threats.
- Hands-on knowledge of GitHub Enterprise Cloud, GitHub Actions, runners, rulesets, and policies.
- Knowledge of Git practices, repository lifecycle management, Conventional Commits, semantic versioning, trunk-based development, GitFlow, and pull request workflows.
- Hands-on experience with SAST, SCA, secrets scanning, or cloud security tools.
- Ability to write security policies and standards and translate them into technical enforcement.
- Knowledge of IAM concepts including SSO, RBAC, and least privilege.
- Proficiency with infrastructure as code using Terraform, CloudFormation, or CDK, plus familiarity with configuration management tools.
- Experience with AWS compute, networking, storage, IAM, container orchestration, and AWS security practices.
- Strong scripting and automation skills in Python or Bash, with familiarity with TypeScript and Node.js.
- Understanding of CMDBs and ITIL-aligned change management, including approvals and audit trails.
- Awareness of AI tool governance, developer endpoint security, and MDM.
- Strong communication skills and ability to influence adoption across engineering teams.
- Bachelor’s degree or higher in a technology-related field is preferred.
- Preferred qualifications include experience with GitHub Copilot, Cursor IDE, developer agents/MCP integrations, Backstage plugins, internal developer platforms, OPA, Sentinel, AWS or Kubernetes certifications, and security certifications such as CSSLP or Security+.
Benefits
- Health care coverage and wellness benefits.
- Generous flexible paid downtime.
- Continuous learning resources, training, and certification support.
- Retirement planning, continuing education support, company-matched student loan contribution, and financial wellness programs.
- Family-oriented benefits and partner and dependent perks.
- Retail discounts and referral incentive awards.