Company Overview
DigitalXnode helps clients across industries connect with skilled and relevant talent for their technology and business requirements. We support hiring and staff augmentation needs by identifying professionals with the right expertise for a variety of projects and engagement models.
Job Summary
We are looking for experienced DevSecOps Specialists to support our client’s information security and engineering requirements in India. The role requires hands-on experience across software development security, cloud operations and security governance. This is a remote opportunity, with full-time, part-time or contractual engagement depending on project requirements.
Key Responsibilities
- Integrate automated security testing tools into CI/CD pipelines and development workflows.
- Conduct threat modelling, risk assessments and security architecture reviews.
- Perform code security reviews, vulnerability assessments and end-to-end security evaluations across applications, APIs and cloud environments.
- Review application and infrastructure configurations against security standards and compliance requirements.
- Assess and harden cloud environments across AWS, Azure and GCP.
- Review container environments including Docker and Kubernetes.
- Work with engineering teams to analyse vulnerabilities and provide practical remediation recommendations.
- Support security audits, gap assessments and compliance reviews.
- Promote secure development practices and a security-first engineering culture.
Required Technical Skills
- 3+ years of relevant hands-on experience in DevSecOps, application security or security engineering.
- Experience integrating tools such as Snyk, SonarQube, Checkmarx, Trivy, ZAP or Semgrep into CI/CD pipelines.
- Previously worked with GitHub Actions, GitLab CI or Jenkins.
- Strong understanding of OWASP and secure coding principles.
- Hands-on experience with manual and automated source code reviews.
- Knowledge of network security, IAM, cryptography, endpoint security and incident response fundamentals.
- Experience identifying vulnerabilities and implementing or recommending fixes.
- Working knowledge of cloud-native and container security.
DevSecOps and CI/CD Security
- Understanding of SAST, DAST, SCA, IAST and container scanning.
- Ability to automate security checks within software delivery workflows.
- Experience reviewing security findings and supporting remediation.
Cloud and Infrastructure Security
- Experience securing workloads on AWS, Azure and/or GCP.
- Working knowledge of Terraform or CloudFormation.
- Experience with Docker, Kubernetes or containerised environments.
- Ability to review cloud and hosting configurations for security risks.
Compliance and Security Standards
- Familiarity with ISO 27001, NIST, CIS Benchmarks, SOC 2 and PCI-DSS.
- Understanding of OWASP Top 10.
- Experience conducting gap analyses, security reviews or compliance assessments.
Preferred Skills
- Experience using Cycode will be an added advantage.
- Scripting or programming skills in Python, Bash, Go or JavaScript.
- Ability to communicate security risks to technical and business stakeholders.
Required Skills
- Strong analytical and problem-solving abilities.
- Ability to investigate security issues and provide practical remediation guidance.
- Good written and verbal communication skills.
- Ability to collaborate with developers, DevOps teams and cloud engineers.
AI Experience
Not Mandatory. Experience using AI-assisted tools for security analysis, code review, vulnerability investigation, documentation or security automation can be considered as an advantage.
Managerial Experience
Not Mandatory. This would be an individual contributor role primarily. Formal team-handling experience is not required, although the candidate should be comfortable guiding engineering teams on security findings and remediation.
Operational Experience
- Experience working with software development and DevOps teams.
- Experience managing vulnerability remediation.
- Experience participating in security audits, assessments or compliance activities.
- Good with documentation as reference records.
Qualifications
- Any Graduate with relevant experience in information security, cybersecurity, DevSecOps or security engineering may be considered.
- A degree in Computer Science, Information Technology, Cybersecurity, Engineering or a related field will be an advantage.
Certifications
- CISSP, CISA, CEH, GWAPT, OSWE or CSSLP will be an advantage.
- AWS or Azure Security Specialty certifications will be beneficial.
Experience
3–6 years of relevant experience in DevSecOps, application security, cloud security or security engineering.
Submit Resume at apply@digitalxnode.com
Explore more job opportunities at Job Openings