Senior DevSecOps Engineer

• Partner with R&D to design and maintain secure CI/CD pipelines, from code commit through deployment
• Integrate static and dynamic application security testing (SAST/DAST), dependency and container scanning, and secrets management into the development lifecycle
• Harden build systems, artifact repositories, and deployment tooling against common attack paths
• Own infrastructure-as-code security, reviewing and improving how Terraform, Kubernetes, and cloud configurations are written and deployed
• Act as the security point of contact for engineering teams, helping them fix issues without slowing them down unnecessarily
• Review new tools, services, and architecture decisions for security implications before they ship
• Build automation and guardrails so secure practices are the path of least resistance for developers
• Work with the IT/ITSec Manager and Senior Compliance Analyst to keep pipeline and infrastructure changes aligned with compliance obligations
• Support incident response for build, deployment, or production infrastructure
• Help set and maintain security standards for the software development lifecycle

• 7-8 years in DevOps, platform engineering, or security engineering, with real hands-on pipeline and infrastructure experience
• Direct experience securing CI/CD pipelines and build systems, not just running them
• Strong background with cloud infrastructure (AWS, Azure, or GCP) and infrastructure-as-code (Terraform or similar)
• Comfortable with containers and orchestration (Docker, Kubernetes)
• Experience with SAST/DAST tools, dependency scanning, and secrets management
• Able to work directly with engineers’ day to day and explain security tradeoffs in terms that land
• Familiarity with HIPAA, SOC 2, HITRUST, or GDPR is a plus, especially in healthcare or another regulated industry
• Experience in a healthcare, fintech, or other regulated environment where security and compliance carry real weight
• Relevant certifications such as AWS/Azure/GCP security specialties, CKS, or similar
• A background writing your own tooling or automation rather than just configuring off-the-shelf products
• Excellent Communication Skills (Written & Verbal)
• Working Independently
• Critical Thinking

• Annual Public Holidays as applicable
• 30 days total leave per calendar year
• Mediclaim policy
• Lifestyle Rewards Program
• Group Term Life Insurance
• Gratuity