DevSecOps Engineer

Sutherland
Hyderabad
Workplace: RemoteFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 7+ yearsSkills: ["Communication","Runbook writing","Threat modeling","Secure code reviews","Security training"]

Own cloud and Kubernetes security across GCP and AWS, including CSPM, IAM least-privilege, secrets hygiene, incident response, and compliance evidence for SOC 2, HIPAA, and ISO 27001. Harden GKE with CIS benchmarks, pod security, network policies, runtime detection, and secure container supply chain practices. Secure GitLab CI/CD with integrated scanning, Terraform IaC security gates, and token hygiene, while improving endpoint/network controls, observability, and incident runbooks.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Sutherland
Sutherland
1 day ago

DevSecOps Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live

Job Summary

Own cloud and Kubernetes security across GCP and AWS, including CSPM, IAM least-privilege, secrets hygiene, incident response, and compliance evidence for SOC 2, HIPAA, and ISO 27001. Harden GKE with CIS benchmarks, pod security, network policies, runtime detection, and secure container supply chain practices. Secure GitLab CI/CD with integrated scanning, Terraform IaC security gates, and token hygiene, while improving endpoint/network controls, observability, and incident runbooks.
Location: Hyderabad
Workplace: Remote
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Manage cloud security posture across GCP and AWS, including misconfiguration detection, IAM policies, workload identity, and service endpoint internalisation.
  • •Harden and secure Kubernetes (GKE) with CIS benchmarks, pod security standards, network policies, admission control, RBAC least-privilege, and runtime threat detection.
  • •Secure GitLab CI/CD end-to-end with pipeline hardening, integrated scanning (SAST/DAST/dependency/container/secret), IaC security gates (tfsec/Checkov), and token hygiene.
  • •Reduce external attack surface by internalising public services, maintaining WAF/Cloud Armor rules, enforcing TLS 1.2+, and securing bastion host and DNS controls.
  • •Build security automation and observability (compliance and vulnerability remediation as code; Datadog threat monitoring), and maintain security incident runbooks while leading threat modeling and secure reviews.

Key Requirements

  • •7+ years in DevSecOps, cloud security, or infrastructure security engineering.
  • •Deep hands-on Kubernetes security experience in production, including RBAC, network policies, pod security, and runtime protection.
  • •Proven experience securing GCP and/or AWS and designing IAM controls.
  • •Strong CI/CD security knowledge, including pipeline hardening, secrets management, and integrated scanning.
  • •Experience internalising service endpoints and reducing cloud attack surface, including familiarity with HIPAA, SOC 2, or ISO 27001.
Experience:7+ yearsCloud securityDevSecOpsKubernetesCI/CD securityRegulated environments
Skills:CommunicationRunbook writingThreat modelingSecure code reviewsSecurity training
Certifications:Certified Kubernetes Security Specialist (CKS)Google Professional Cloud Security EngineerAWS Security Specialty
Languages:English
Tech Stack:GCPAWSKubernetesGKEGitLabTerraformDatadogIstioFalcoOPA/GatekeeperHashiCorp VaultWizOrcaPrisma CloudTrivySnykSplunkChroniclePythonGo

Company Brief

Sutherland
Global digital transformation and business process services firm offering AI, automation, cloud engineering, analytics and customer experience solutions to enterprises across industries.
Industry: Professional Services
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Established Company
Funding: Private Equity Backed
Headquarters: Pittsford (Rochester), NY, United States
Founded: 1986
Glassdoor
Glassdoor: 3.5
WebsiteLinkedInGlassdoor