Sr DevSecOps Engineer
S&P Global3 days ago
Bengaluru, India or Hyderābād, IndiaSenior
Responsibilities
- Define and implement baseline security policies and automated guardrails across source control and CI/CD environments.
- Integrate, manage, and tune SonarQube, GitHub Advanced Security, Checkmarx, Wiz, and related code-quality and application-security tools.
- Triage and prioritize security findings by risk, track remediation against SLAs, and support audit and compliance activities.
- Establish governance for credentials, secrets, non-human identities, sensitive configuration changes, and developer endpoints.
- Harden build infrastructure and software supply-chain controls, including artifact management, SBOMs, and artifact signing.
- Provision, secure, and optimize AWS services supporting the developer platform, including EC2, ECS/EKS, Lambda, S3, IAM, and CloudFormation/CDK.
- Contribute to governance for AI-assisted development tools, developer agents, and MCP integrations.
- Partner with platform, DevOps, TechOps, InfoSec, and engineering teams to automate controls and drive adoption.
Requirements
- 5–8 years of experience in DevSecOps, application security, or security governance.
- Strong experience designing and automating enterprise-scale CI/CD pipelines and understanding source-control security and pipeline threats.
- Hands-on knowledge of GitHub Enterprise Cloud, GitHub Actions, runners, rulesets, policies, and Git practices.
- Experience with SAST, SCA, secrets scanning, or cloud security tools.
- Ability to write security policies and standards and translate them into technical enforcement.
- Knowledge of IAM concepts including SSO, RBAC, and least privilege.
- Proficiency with infrastructure as code using Terraform, CloudFormation, or CDK, plus familiarity with configuration management tools.
- Experience with AWS compute, networking, storage, IAM, container orchestration, and AWS security practices.
- Strong Python or Bash scripting and automation skills, with familiarity with TypeScript and Node.js.
- Understanding of CMDBs and ITIL-aligned change management, including approvals and audit trails.
- Awareness of AI tool governance, developer endpoint security, and MDM.
- Strong communication skills and ability to influence adoption across engineering teams.
- Preferred qualifications include a bachelor’s degree or higher in a technology-related field, experience with GitHub Copilot, Cursor IDE, Backstage plugins, OPA or Sentinel, relevant AWS or Kubernetes certifications, and security certifications such as CSSLP or Security+.
Benefits
- Health care coverage and wellness benefits.
- Generous flexible downtime and time off.
- Continuous learning resources, training, and certification support.
- Retirement planning, continuing education support, company-matched student loan contributions, and financial wellness programs.
- Family-friendly benefits, retail discounts, and referral incentive awards.
- The posting provides country-specific benefit information through the S&P Global benefits website.