Incred Capital-Devsecops Engineer

Job Description:

Job Title: Senior DevSecOps Engineer

Experience: Minimum 5 yrs.+

Location: Mumbai

Reporting to: DevOps Team

Qualifications and Skills:

● Graduation (with relevant IT certification)

● Proven experience as an DevOps/Cloud Engineer with a proper hold on security concepts

● In-depth knowledge of Cloud (AWS) environment, security architectures, and related best practices.

● Hands-on experience with AWS Services like EC2, S3, RDS, Firewalls, intrusion detection/prevention systems i.e., IDS/IPS, VPN, and other security tools.

● Strong analytical and problem-solving skills

● Excellent communication and interpersonal abilities

Position Overview:

As a DevSecOps Engineer, you will play a crucial role in ensuring the integrity, confidentiality, and availability of our organization's cloud and on-prem infrastructure. This position involves designing, implementing, and maintaining robust solutions over cloud while proactively identifying and mitigating potential security threats. You will work closely with cross-functional teams to enhance our overall application performance, the organisation is fully-compliant and all the sensitive information/systems are well positioned for the growth.

Key Responsibilities:

● Exposure in cloud security to design, implement, and maintain automated infrastructure deployments on cloud platforms (AWS)

● To set up secure cloud environments using services like EC2, VPC, S3, RDS etc in scalable architectural patterns.

● Can Implement and maintain cloud security best practices, including server hardening, vulnerability scanning, and patch management

● Prior experience setting up CI/CD pipelines and have knowledge of a CSPM (Cloud Security Posture Mgmt) tools like AWS Security Hub/ SentinelOne/PrismaCloud or similar tool

● Hands-on experience in handling and understanding Windows & Linux platforms

● To work on remediating observations identified in security audits and vulnerability assessments.

● Collaborate with teams to enforce security policies and ensure compliance with regulatory requirements of SEBI, NSE, BSE and CDSL

● Should have sound knowledge of change, incident & problem management and also proactively involve in optimising existing processes.

GOOD TO HAVE

● Assist in conducting Cyber Audit, System Audit, Patching of critical applications & timely completion of VAPT (Internal+ External)

● Monitor network performance and ensure optimal operation through regular assessments.

● Identify and resolve issues affecting network connectivity, latency, and bandwidth.

● Have knowledge of mock BCP/DR for critical applications.

● Hands-on experience in PAM solutions, Trading applications will be an added advantage

● Configure and troubleshoot routers, switches, firewalls, and other network devices.

● Contribute to the definition of procedures & Processes necessary for the scope of work.

● Review necessary health check and monitoring reports and act appropriately.

● Work closely with IT teams and other departments to integrate security measures into all aspects of the network.