Most applications go out cold — see where you stand first. No sign-up to start.
Don't just apply. Show up ready.
Olive works from this exact posting — no sign-up to start.
At a glance
Compensation
$15–35K/yr
Location
Bangalore, Karnataka, India
Work Authorization
Not specified
Job overview
The DevOps Lead will embed security testing and best practices throughout the development lifecycle, automate security tools in CI/CD pipelines, conduct vulnerability assessments and penetration testing, secure infrastructure as code, monitor incidents with SIEM and observability solutions, ensure compliance with standards such as GDPR and SOC 2, and foster a security‑aware culture through collaboration and training.
Skills & qualifications
RequiredNice to have
Skills
SOC 2Continuous IntegrationAmazon Web ServicesDevOpsCI/CDCloud ServicesScriptingTerraformPythonArtificial IntelligenceBashVaultInfrastructure as Code (IaC)Security OperationsAutomationDockerForecastingISOThreat HuntingShell ScriptingVirtualizationGithubOWASPGolangKubernetesMachine LearningComputer SecurityJenkinsGitLab CIGitHub ActionsAWSIAMSecurity GroupsKMSSecrets ManagerShellGoSonarQubeSnykHashiCorp VaultOWASP ZAPSIEMELK StackGrafanaISO 27001PCI-DSSGDPRHIPAAAI/ML Security ToolsAsync Real-Time Systems
Qualifications
4+ Years DevSecOps Experience
Full job description
Responsibilities:
- Integrate Security: Embed security testing, reviews, and best practices into all phases of the development lifecycle
- Automate Security Processes: Design, implement, and maintain security automation tools (e. g., SAST, DAST, SCA, secrets scanning) within the CI/CD pipelines to detect vulnerabilities early and efficiently.
- Conduct Assessments and Testing: Perform regular vulnerability assessments, threat modelling, and penetration testing on applications and infrastructure to identify and mitigate risks.
- Manage Infrastructure as Code (IaC) Security: Ensure secure configuration and management of cloud and on-premise infrastructure using IaC tools like Terraform or CloudFormation.
- Monitor and Respond to Incidents: Set up and manage security monitoring and observability solutions (e. g., SIEM, ELK stack, Grafana) to detect and respond to security incidents in real-time.
- Ensure Compliance: Work with compliance teams to implement and enforce security policies and regulatory standards (e. g., GDPR, HIPAA, PCI-DSS, SOC 2).
- Collaborate and Educate: Foster a security-aware culture by collaborating with cross-functional teams and providing guidance and training on secure coding practices and emerging threats.
Requirements:
- Experience: Proven experience in a DevSecOps, DevOps, or related cybersecurity role (typically 4+ years, more for senior positions).
Technical Proficiency:
- CI/CD Tools: Jenkins, GitLab CI, GitHub Actions.
- Cloud Platforms: Deep understanding of security on AWS.
- Scripting/Programming: Proficiency in languages like Python, Bash, Shell, or Go for automation and custom tool development.
- IaC and Containerization: Experience with Docker, Kubernetes, and Terraform.
- Security Tools: Familiarity with vulnerability scanning, static/dynamic analysis, and secrets management tools (e. g., SonarQube, Snyk, HashiCorp Vault, OWASP ZAP).
- Experience with AI/ML-based security tools for threat detection and risk forecasting.
Core Experience:
- Security in Production: Has actually fixed security vulnerabilities in live systems handling real user data at scale.
- AWS Security: Hands-on with IAM, Security Groups, KMS, Secrets Manager (not just theoretical).
- CI/CD Security: Integrated security scanning in pipelines (not just built pipelines).
- Compliance: Worked on ISO 27001 SOC 2 or PCI-DSS implementation (not just awareness).
Key Points:
- Must have experience in handling 5k+ concurrent requests.
- Must have prepared the company for ISO/SOC 2 successfully.
- Must have async/real-time experience.
You've read the whole posting — now see how you match it.