Role Overview:
- As a DevSecOps Engineer at Fynd, you will be responsible for embedding security into the DevOps lifecycle, automating security processes, and ensuring compliance across our cloud-based infrastructure. You will collaborate with cross-functional teams to implement security best practices and proactively mitigate security risks.
What will you do at Fynd
- Cloud Security & Infrastructure:
- Secure and manage cloud environments in GCP, AWS, and Azure.
- Implement best practices for cloud security, IAM, and compliance.
- Monitor and optimize cloud workloads for security and efficiency.
- Security Automation & DevOps Integration:
- Automate security processes using Ansible, Azure DevOps, and other tools.
- Integrate security checks into CI/CD pipelines to enable secure deployments.
- Conduct vulnerability assessments and harden infrastructure.
- Threat Detection & Incident Response:
- Deploy and manage IDS/IPS solutions to detect and prevent cyber threats.
- Monitor security logs and respond to incidents proactively.
- Work with SOC teams to enhance real-time threat detection.
- Compliance & Risk Management:
- Ensure adherence to industry security standards and compliance frameworks.
- Conduct gap assessments and implement remediation plans.
- Maintain security documentation and audit readiness.
- Collaboration & Continuous Improvement:
- Work closely with Engineering, DevOps, and Security teams to drive security initiatives.
- Stay updated with emerging security trends and threats.
- Advocate for a DevSecOps-first culture within the organisation.
Some more requirements
- 5 to 7 years of experience in DevSecOps, Cloud Security, or Infrastructure Security.
- Strong expertise in GCP, AWS, and Azure security best practices.
- Proficiency in Linux administration and security hardening.
- Hands-on experience with Ansible, Azure DevOps, and CI/CD pipelines.
- Familiarity with security tools like IDS/IPS, SIEM, and vulnerability scanners.
- Knowledge of security frameworks (ISO 27001, NIST, CIS, etc.).
- Experience with JIRA for task management and tracking.
- Strong problem-solving skills and ability to work in a fast-paced environment.
Preferred Qualifications (Nice to Have):
- Certifications like AWS Security Specialty, GCP Security Engineer, CISSP, CEH, or CKA.
- Experience with IaC security tools (Terraform, CloudFormation).
- Knowledge of container security (Docker, Kubernetes).
