Sr. DevSecOps Engineer

Overview

Senior DevSecOps Engineer for a remote position in the corporate travel industry, combining application development experience with security expertise to build, secure and maintain cloud-native infrastructure.

What you'll do

• Work with DevOps teams to design, implement and maintain secure CI/CD pipelines that integrate security testing at every stage of the software development lifecycle
• Implement automated security scanning including SAST, DAST, SCA and container scanning
• Deploy and support API Security tools
• Ensure tools consistently report to aggregator
• Collaborate with development teams to promote secure coding practices and provide security guidance throughout the development process
• Ensure compliance with industry standards relevant to the travel industry including PCI-DSS, GDPR and SOC 2
• Mentor junior engineers and promote a security-first culture across engineering teams

What you'll need

• 5+ years of professional software development experience with demonstrable expertise in at least one major programming language (Python, Go, Java, JavaScript/TypeScript, or similar)
• 3+ years of hands-on DevSecOps or Security Engineering experience
• Strong knowledge of OWASP
• Strong cloud security expertise with at least one major cloud service provider (AWS, Azure or GCP)
• Strong knowledge of API Security and associated security tools (Salt, Akamai, Cloudflare, or similar)
• Deep understanding of cloud-native security including IAM, network security, encryption, secrets management and compliance frameworks
• Proficiency with CI/CD tools (Jenkins, GitLab CI, GitHub Actions, CircleCI, or similar)
• Experience with Infrastructure as Code tools (Terraform, CloudFormation, Ansible, or similar)
• Practical experience with containerization and orchestration technologies (Docker, Kubernetes, ECS, or similar)
• Strong understanding of network security, authentication protocols and secure API design
• Excellent communication skills with ability to explain security concepts to technical and non-technical audiences

Nice to have

• Experience in the travel, hospitality or e-commerce industry
• Multi-cloud experience across AWS, Azure and GCP
• Professional security certifications (CISSP, CEH, OSCP, AWS Security Specialty, Azure Security Engineer, or similar)
• Knowledge of compliance frameworks specific to payment processing and international data protection (PCI-DSS, GDPR, CCPA)
• Background in penetration testing or red team operations
• Experience with threat modeling methodologies (STRIDE, PASTA, OCTAVE) and risk assessment frameworks
• Knowledge of MLSecOps practices including model security, data pipeline protection and AI/ML supply chain security
• Contributions or security research publications

Details

• Remote position
• Location: India