Cloud Security / Devsecops Engineer (aws + Kubernetes)

Key Responsibilities

Design and implement secure and scalable infrastructure on AWS. Secure and manage Kubernetes clusters and containerized workloads. Implement security controls across the cloud infrastructure, applications, containers, and CI/CD pipelines. Integrate security practices into the DevOps lifecycle (DevSecOps). Develop and maintain secure CI/CD pipelines with automated security checks. Implement Infrastructure as Code (IaC) using tools such as Terraform or CloudFormation. Configure and manage AWS security services including IAM, KMS, CloudTrail, GuardDuty, Security Hub, WAF, and VPC security controls. Implement identity and access management, least-privilege policies, roles, permissions, and secrets management. Secure container images and Kubernetes workloads through vulnerability scanning and policy enforcement. Implement Kubernetes security controls including RBAC, Network Policies, Pod Security, Secrets management, and admission controls. Monitor cloud environments for security threats, vulnerabilities, misconfigurations, and suspicious activity. Perform vulnerability assessments and coordinate remediation of security issues. Integrate tools such as SAST, DAST, SCA, container scanning, and IaC scanning into CI/CD pipelines. Investigate and respond to cloud and infrastructure security incidents. Establish security best practices, standards, and reusable controls for engineering teams. Conduct security reviews of infrastructure, architecture, and deployment configurations. Automate security processes and compliance checks wherever possible. Maintain documentation related to security architecture, policies, configurations, and incident response. Required Skills & Experience Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. 3–7 years of experience in Cloud Security, DevSecOps, DevOps, or related roles. Strong hands-on experience with AWS cloud infrastructure and security. Strong understanding of Kubernetes and container security. Proficiency with Linux and networking fundamentals. Strong experience with Infrastructure as Code, preferably Terraform. Hands-on experience with CI/CD platforms such as Jenkins, GitHub Actions, GitLab CI, or AWS CodePipeline. Good understanding of Docker/containerization. Strong understanding of: IAM & RBAC VPC & network security Security groups & NACLs Encryption & key management Secrets management Logging & monitoring Vulnerability management Identity and access controls Experience implementing security scanning and controls within CI/CD pipelines. Strong scripting/automation skills using Python, Bash, or similar. Experience with Git and Git-based development workflows. Kubernetes Security Skills Candidates should have practical knowledge of: Kubernetes RBAC Network Policies Pod Security Standards Kubernetes Secrets Service Accounts Ingress security Container image security Resource limits and security contexts Admission controllers/policies Cluster and workload monitoring Kubernetes vulnerability management Cloud Security Tools & Technologies Experience with some of the following is preferred: AWS: IAM | KMS | CloudTrail | GuardDuty | Security Hub | WAF | VPC | CloudWatch | Config DevSecOps: Jenkins | GitHub Actions | GitLab CI/CD | SonarQube | Snyk | Trivy | Checkmarx | OWASP Containers & Kubernetes: Docker | Kubernetes | Helm | EKS | ArgoCD | Falco | OPA/Gatekeeper | Kyverno IaC: Terraform | CloudFormation | Terragrunt Good to Have Experience securing AWS EKS environments. Knowledge of CSPM/CNAPP solutions. Experience with SIEM platforms such as Splunk, ELK, or Microsoft Sentinel. Familiarity with Zero Trust architecture. Experience with security frameworks such as CIS, NIST, ISO 27001, SOC 2, or PCI-DSS. Relevant certifications such as: AWS Security Specialty AWS Solutions Architect Certified Kubernetes Security Specialist (CKS) Certified Kubernetes Administrator (CKA) Security+/CISSP or equivalent Experience with cloud security automation and policy-as-code. Exposure to incident response and forensic investigation in cloud environments. Candidate Profile The ideal candidate should have: Strong cloud security and DevSecOps mindset. Excellent troubleshooting and problem-solving skills. Ability to identify and remediate security vulnerabilities independently. Strong understanding of cloud networking and security architecture. Ability to balance security requirements with development and operational needs. Strong automation mindset and willingness to eliminate repetitive security tasks. Good communication and collaboration skills. Ability to work effectively with engineering, DevOps, infrastructure, and security teams. Key Technologies AWS | Kubernetes | EKS | Docker | Terraform | Linux | CI/CD | DevSecOps | IAM | VPC | CloudTrail | GuardDuty | Security Hub | KMS | WAF | Git | Jenkins/GitHub Actions | Trivy/Snyk | Python/Bash Employment Details Experience: 3–7 Years Job Type: Full-time Work Mode: Remote Location: Bengaluru Skills: AWS, Kubernetes, DevSecOps, Terraform, CI/CD, Docker, IAM, Container Security, Vulnerability Management, Python Work mode: Bengaluru Experience: 3–8 years Location : Jalahalli East, Karnataka, India