Job Description:
Job Title: Senior DevSecOps Engineer
Experience: Minimum 5 yrs.+
Location: Mumbai
Reporting to: DevOps Team
Qualifications and Skills:
● Graduation (with relevant IT certification)
● Proven experience as an DevOps/Cloud Engineer with a proper hold on security concepts
● In-depth knowledge of Cloud (AWS) environment, security architectures, and related best practices.
● Hands-on experience with AWS Services like EC2, S3, RDS, Firewalls, intrusion detection/prevention systems i.e., IDS/IPS, VPN, and other security tools.
● Strong analytical and problem-solving skills
● Excellent communication and interpersonal abilities
Position Overview:
As a DevSecOps Engineer, you will play a crucial role in ensuring the integrity, confidentiality, and availability of our organization's cloud and on-prem infrastructure. This position involves designing, implementing, and maintaining robust solutions over cloud while proactively identifying and mitigating potential security threats. You will work closely with cross-functional teams to enhance our overall application performance, the organisation is fully-compliant and all the sensitive information/systems are well positioned for the growth.
Key Responsibilities:
● Exposure in cloud security to design, implement, and maintain automated infrastructure deployments on cloud platforms (AWS)
● To set up secure cloud environments using services like EC2, VPC, S3, RDS etc in scalable architectural patterns.
● Can Implement and maintain cloud security best practices, including server hardening, vulnerability scanning, and patch management
● Prior experience setting up CI/CD pipelines and have knowledge of a CSPM (Cloud Security Posture Mgmt) tools like AWS Security Hub/ SentinelOne/PrismaCloud or similar tool
● Hands-on experience in handling and understanding Windows & Linux platforms
● To work on remediating observations identified in security audits and vulnerability assessments.
● Collaborate with teams to enforce security policies and ensure compliance with regulatory requirements of SEBI, NSE, BSE and CDSL
● Should have sound knowledge of change, incident & problem management and also proactively involve in optimising existing processes.
GOOD TO HAVE
● Assist in conducting Cyber Audit, System Audit, Patching of critical applications & timely completion of VAPT (Internal+ External)
● Monitor network performance and ensure optimal operation through regular assessments.
● Identify and resolve issues affecting network connectivity, latency, and bandwidth.
● Have knowledge of mock BCP/DR for critical applications.
● Hands-on experience in PAM solutions, Trading applications will be an added advantage
● Configure and troubleshoot routers, switches, firewalls, and other network devices.
● Contribute to the definition of procedures & Processes necessary for the scope of work.
● Review necessary health check and monitoring reports and act appropriately.
● Work closely with IT teams and other departments to integrate security measures into all aspects of the network.
Skills Required
- Graduation with relevant IT certification
- Proven experience as a DevOps/Cloud Engineer with solid security concepts
- In-depth knowledge of Cloud (AWS) environment and security architectures
- Hands-on experience with AWS services (EC2, S3, RDS, VPC) and cloud security
- Experience with firewalls, IDS/IPS, VPN and other security tools
- Experience implementing server hardening, vulnerability scanning and patch management
- Prior experience setting up CI/CD pipelines and knowledge of CSPM tools (AWS Security Hub/SentinelOne/PrismaCloud or similar)
- Hands-on experience with Windows and Linux platforms
- Experience remediating findings from security audits and vulnerability assessments
- Ability to collaborate to enforce security policies and ensure compliance with SEBI, NSE, BSE and CDSL
- Knowledge of change, incident and problem management processes
- Assist in conducting cyber/system audits, patching and timely completion of VAPT (internal and external)
- Monitor network performance and resolve connectivity, latency, and bandwidth issues
- Knowledge of mock BCP/DR for critical applications
- Hands-on experience with PAM solutions; experience with trading applications is an advantage
- Configure and troubleshoot routers, switches, firewalls and other network devices
- Contribute to definition of procedures and processes and review health check/monitoring reports
What We Do
NextHire Consulting is an AI-driven recruiting platform that streamlines the hiring process for companies. By leveraging AI agents for sourcing, screening, and interviewing, the platform enables teams to focus on pre-qualified finalists. It provides data-driven insights into candidate soft skills and behavioral styles, aiming to disrupt traditional recruitment models with efficient, automated, and science-based talent acquisition solutions for businesses of all sizes.
