Hiring for DevSecOps Lead Position (India)

Hiring for DevSecOps Lead Position (India)

Company: Growing Careers
Job Location: India
Employment Type: Full-time

Key Responsibilities

Secure SDLC & CI/CD
Embed security checks into every pipeline: SAST, DAST, SCA, secrets scanning, container and IaC scanning.
Define security gates and quality thresholds that block risky releases without slowing delivery.
Secure the software supply chain: dependency management, image signing, SBOMs and artifact provenance.
Product & Application Security
Run threat modelling and security design reviews for recent features, services and APIs.
Define secure coding standards, authentication/authorization patterns and encryption practices for product teams.
Coordinate penetration tests, smart-contract audits and bug bounty findings; track remediation to closure.
Cloud Workload Security
Secure Kubernetes, container and serverless workloads across AWS, Azure and GCP.
Manage secrets and keys (Vault, KMS, Key Vault) and enforce least-privilege IAM for applications.
Run cloud security posture management and policy-as-code guardrails with the Cloud & IT Infrastructure team.
Compliance Automation
Translate SOC 2, ISO 27001, PCI-DSS, GDPR and DPDP Act requirements into technical controls for our products.
Automate evidence collection and continuous compliance monitoring; support external audits.
Maintain data classification, logging, retention and privacy controls in our applications.
Vulnerability Management & Incident Response
Own vulnerability triage and fix SLAs across code, dependencies, containers and cloud workloads.
Set up security logging and SIEM alerts for products; lead investigation of product security incidents.
Enablement & Leadership
Train developers on secure coding and run security champions across product teams.
Answer client security questionnaires and support enterprise security reviews.
Hire and mentor security engineers as the function grows.

• Skill Set Required

Dev SecOps Tooling: Sonar Qube, Snyk, Checkmarx, OWASP ZAP/Burp Suite, Trivy, Checkov, Gitleaks
CI/CD: Git Hub Actions, Git Lab CI, Jenkins or Azure Dev Ops
Application Security: OWASP Top 10 and API Top 10, OAuth2/OIDC, JWT, encryption, threat modeling (STRIDE)
Cloud & Container Security: AWS/Azure/GCP security services, Kubernetes security, Wiz/Prisma Cloud, OPA/Kyverno