Senior DevSecOps Engineer

Overview

Build security into ClearDATA's software delivery by securing CI/CD pipelines, hardening build and deployment processes, and making security part of engineering's workflow rather than a final gate.

What you'll do

• Partner with R&D to design and maintain secure CI/CD pipelines, from code commit through deployment.
• Integrate static and dynamic application security testing (SAST/DAST), dependency and container scanning, and secrets management into the development lifecycle.
• Harden build systems, artifact repositories, and deployment tooling against common attack paths.
• Own infrastructure-as-code security by reviewing and improving how Terraform, Kubernetes, and cloud configurations are written and deployed.
• Act as the security point of contact for engineering teams, helping them fix issues without slowing them down unnecessarily.
• Review new tools, services, and architecture decisions for security implications before they ship.
• Build automation and guardrails so secure practices are the path of least resistance for developers.
• Work with the IT/ITSec Manager and Senior Compliance Analyst to keep pipeline and infrastructure changes aligned with compliance obligations.
• Support incident response for anything touching build, deployment, or production infrastructure.
• Help set and maintain security standards for the software development lifecycle.

What you'll need

• 7-8 years in DevOps, platform engineering, or security engineering.
• Direct experience securing CI/CD pipelines and build systems, not just running them.
• Strong background with cloud infrastructure (AWS, Azure, or GCP) and infrastructure-as-code (Terraform or similar).
• Comfortable with containers and orchestration (Docker, Kubernetes).
• Experience with SAST/DAST tools, dependency scanning, and secrets management.
• Able to work directly with engineers day to day and explain security tradeoffs in terms that land.

Nice to have

• Familiarity with HIPAA, SOC 2, HITRUST, or GDPR, especially in healthcare or another regulated industry.
• Experience in a healthcare, fintech, or other regulated environment where security and compliance carry real weight.
• Relevant certifications such as AWS/Azure/GCP security specialties, CKS, or similar.
• A background writing your own tooling or automation rather than just configuring off-the-shelf products.

Details

• Remote work; location listed as Mumbai - Remote.
• Shift timings: Monday to Friday, 5:30pm IST to 2:30am IST.