Senior DevSecOps Engineer

Kantar
Hyderabad
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringSkills: ["Problem-solving","Systems-thinking","Documentation","Communication","Mentoring"]

Own and evolve the security posture of a cloud-native data platform, protecting data in containerised Python services running on AWS. Partner with Data Engineering and Data Science to deliver secure-by-default DevOps, DataOps, MLOps, and AIOps workloads using guardrails, automation, and observability. Build CI/CD security automation (SAST, scanning, policy-as-code), secure AWS footprint and databases, and develop cloud-agnostic patterns to extend controls toward Azure.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Kantar
Kantar
1 month ago

Senior DevSecOps Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 39 days agoStatus: Live

Job Summary

Own and evolve the security posture of a cloud-native data platform, protecting data in containerised Python services running on AWS. Partner with Data Engineering and Data Science to deliver secure-by-default DevOps, DataOps, MLOps, and AIOps workloads using guardrails, automation, and observability. Build CI/CD security automation (SAST, scanning, policy-as-code), secure AWS footprint and databases, and develop cloud-agnostic patterns to extend controls toward Azure.
Location: Hyderabad
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Design and implement security controls for containerised Python applications across build, deploy, and runtime (hardening, least privilege, network policies, secrets, vulnerability management).
  • •Embed security into CI/CD with automated checks (SAST, dependency/IaC/container scanning) and enforce policy-as-code with developer-friendly workflows.
  • •Secure the AWS footprint using Infrastructure as Code (IAM design, account/environment separation, encryption standards, private networking, service control guardrails).
  • •Own database and end-to-end data protection controls across data stores (e.g., Postgres/Redshift) including access models, auditing, encryption, key management, classification, and tokenisation/masking.
  • •Build security observability (logging, monitoring, alerting, incident runbooks) and enable secure MLOps/DataOps practices while developing cloud-agnostic patterns for a potential Azure move.

Key Requirements

  • •Significant experience in DevSecOps/SRE/Platform Engineering roles with ownership of security outcomes for cloud-native production systems.
  • •Strong hands-on AWS experience across identity, networking, encryption, and logging, with ability to extend controls to Azure over time.
  • •Deep knowledge of containers and orchestration (Docker; Kubernetes/EKS or ECS), including secure configuration, runtime hardening, and network isolation.
  • •Proficiency with Infrastructure as Code (Terraform/CloudFormation) and CI/CD, including policy-as-code and security automation.
  • •Strong Python skills plus secure backend practices, and solid SQL experience securing relational databases (e.g., Postgres) and warehouses (e.g., Redshift).
Experience:SaaSCloud-native
Skills:Problem-solvingSystems-thinkingDocumentationCommunicationMentoring
Tech Stack:AWSECSEKSIAMVPCKMSS3CloudWatchCloudTrailLambdaRedshiftSageMakerAzureAKSKey VaultEntra IDDatabricksDockerKubernetesPostgres

Company Brief

Kantar
Global data, insights and consulting company providing market research, analytics, and strategic advisory services to help brands, media companies and organizations understand consumer behavior and drive business growth.
Industry: Consulting
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Established Company
Funding: Private Equity Backed
Headquarters: London, United Kingdom
Founded: 1993
Glassdoor
Glassdoor: 3.6
WebsiteLinkedIn