DevOps Engineer

Position Details

| **Experience** | 5–8 Years |

| **Work Location** | Mumbai Suburbs-Andheri |

| **Start Date** | Immediate |

| **CTC** | Open to Discussion |

## Job Description

The selected candidate will be responsible for leading backend development, managing cloud infrastructure and deployments, designing scalable system architectures, and mentoring the engineering team. The role requires strong technical expertise, leadership capabilities, and the ability to translate business requirements into effective technical solutions.

### 1. DevOps and Cloud Infrastructure

- Create and configure cloud instances on Azure, AWS, or GCP.

- Deploy applications and programs to cloud servers and DevOps environments.

- Ensure deployment stability, system uptime, and performance monitoring.

- Automate deployment pipelines and continuously improve CI/CD practices.

- Implement and maintain reliable, scalable, and secure deployment processes.

### 2. Architecture and Backend Development

- Design system architectures with a focus on performance, security, scalability, and reliability.

- Design, develop, and maintain clean, scalable, and optimized backend applications, preferably using Node.js.

- Troubleshoot and resolve complex technical issues across development, testing, and production environments.

- Translate business requirements into effective technical solutions and ensure timely delivery.

- Develop and maintain APIs, microservices, databases, and system integrations.

### 3. Team Leadership and Management

- Lead, mentor, and guide a team of backend developers and engineers.

- Drive Agile development processes, including sprint planning, daily stand-ups, and retrospectives.

- Conduct code reviews and ensure adherence to coding standards and engineering best practices.

- Promote collaboration, accountability, and a high-performance engineering culture.

- Support team members in resolving technical challenges and improving their skills.

## 4.Skills and Qualifications Required

- B.Tech / B.E. in Computer Science, Information Technology, or a related field.

- Strong proficiency in backend development using Node.js, JavaScript, Python, or Java.

- Hands-on experience with DevOps practices and cloud deployment environments.

- Solid understanding of APIs, microservices, databases, and system integration.

- Experience in leading development teams within an Agile/Scrum environment.

- Working knowledge of Linux, Kafka, and Docker.

- Good understanding of CI/CD pipelines, cloud technologies, and deployment automation.

- Strong problem-solving, analytical, communication, and leadership skills.

##5. Behavioural Competencies

- **Team Leadership:** Ability to manage, train, mentor, and guide team members.

- **Relationship Management:** Strong interpersonal skills and the ability to build effective working relationships.

- **Analytical Thinking and Innovation:** Strong analytical capabilities, with a focus on innovative problem-solving.

- **Business Acumen:** Ability to understand business use cases and translate them into practical technical solutions.

- **Customer Empathy:** Ability to understand customer needs and deliver solutions that enhance customer experience.

- **Communication:** Excellent verbal and written communication skills.

Salary will be decided based on your skills and experience.

Cybersecurity Engineer – AI Training Project

About the Opportunity

We’re looking for experienced Cybersecurity Engineers to contribute technical expertise to a customer project focused on improving the capabilities of next-generation AI systems.

In this role, you’ll use your real-world experience in cybersecurity, software engineering, vulnerability assessment, and secure development to create high-quality technical inputs that help AI systems better understand, debug, secure, and reason about complex software.

What You’ll Do

• Analyze, debug, and resolve software bugs, vulnerabilities, and security issues across complex codebases.
• Review source code and identify potential security weaknesses, vulnerabilities, and attack vectors.
• Perform security assessments, vulnerability assessments, penetration testing, and codebase audits.
• Develop and modify software using languages such as Python, Java, Rust, Go, C++, or TypeScript.
• Implement new features and fix existing functionality while maintaining strong security and engineering standards.
• Refactor legacy code to improve security, maintainability, reliability, and performance.
• Work on backend systems and help optimize applications for scalability, performance, and security.
• Analyze real-world security scenarios and translate your expertise into high-quality technical examples and problem-solving tasks.
• Document technical findings, vulnerabilities, debugging approaches, and recommended solutions.
• Provide domain expertise that helps improve how AI systems reason about software engineering and cybersecurity problems.

What We’re Looking For

• Strong professional experience in Cybersecurity / Application Security / Product Security / DevSecOps / Penetration Testing / Vulnerability Management.
• Strong programming experience in one or more of:
• Python
• Java
• Rust
• Go
• C++
• TypeScript
• Proven experience with debugging, troubleshooting, and fixing complex software issues.
• Hands-on experience with penetration testing, vulnerability assessment, security auditing, or application security.
• Understanding of secure software development practices and modern security threats.
• Strong knowledge of data structures, algorithms, software architecture, and code quality.
• Ability to review unfamiliar codebases and quickly understand how systems work.
• Strong written communication and the ability to explain complex technical findings clearly.

Nice to Have

• Experience with OWASP, API security, cloud security, DevSecOps, or threat modeling.
• Experience performing security assessments on production applications or enterprise systems.
• Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, SAST/DAST tools, or vulnerability scanners.
• Contributions to open-source security or software projects.
• Experience working with AI/ML systems, LLMs, data annotation, or AI training projects.
• Relevant security certifications such as OSCP, OSWE, CEH, CISSP, Security+, or equivalent practical experience.

Engagement

• Role: Cybersecurity Engineer
• Work: Remote(Contract)
• Experience: Mid-level to Senior
• Programming: Required
• Cybersecurity expertise: Required

Why Join?

This is an opportunity to apply your existing cybersecurity expertise to an emerging area of technology. Your practical experience debugging software, identifying vulnerabilities, securing applications, and solving complex engineering problems will directly contribute to improving the capabilities of next-generation AI systems.

If you enjoy breaking down complex technical problems, finding vulnerabilities, fixing software, and thinking deeply about how systems work, this project could be a strong fit.

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

Job Title: Chief Manager – IT Infrastructure & Security

Location: Gurgaon

Experience: 12+ year in same

Qualification: B.Tech/MCA

Preferred Certifications: Palo Alto PCCSE, CyberArk, Nutanix NCP, VMware VCP, CCNP.

Must have exp in Server, network, firewall, edr, virtualization system (vm-ware, dutanix)

Technical Experience Required:

• AWS (Amazon Web Services) and/or Microsoft Azure
• VMware ESX / ESXi
• Windows Server
• Active Directory (AD)
• Kaseya
• DNS & DHCP
• Forcepoint / Websense
• Kaspersky AV
• Cisco networking
• SAN (Storage Area Network)
• Core Networking Tech: VoIP (Voice over IP), VPN (Virtual Private Network), TCP/IP, WAN/LAN/WLAN routing, and switching protocols.

Key Deliverables

Infrastructure Architecture & Operations

• Own the scoping, architecture and design of new infrastructure that will support the business.
• Administer HP Infrastructure, Nutanix HCI, Dell VxRail, VMware, Windows and Linux environments.
• Architect, monitor and maintain Active Directory services, File Services, Server Infrastructure and WAN/LAN/WLAN supporting business-critical systems.
• Be responsible for server, storage, network, security and monitoring hardware, software and services, ensuring they are optimised for availability, stability, integrity, performance and scalability.
• Forecast demand for storage, computing and network capacity, and take appropriate action before capacity limits are reached.
• Maintain IT hardware and software — including servers, peripherals, network nodes, terminals and wiring — manage equipment inventory and the hardware life cycle.

Network & End-User Computing

• Manage LAN/WAN, VPN, Cisco routing/switching and Cisco Meraki WiFi environments.
• Troubleshoot and quickly resolve network issues.
• Oversee end-user computing — laptops, desktops, printers, AV devices, iOS devices/iPad, MDM and endpoint management — and end-user support operations across Head Office, Stores and Warehouse. Security, Identity & Compliance
• Manage Palo Alto firewalls, SentinelOne EDR/XDR, CyberArk PAM, GTB DLP and Forcepoint/ForceScout security platforms.
• Perform regular security monitoring to identify any possible intrusions.
• Manage certificate/PKI and domain/DNS services, including issuance, renewal, rotation and revocation.
• Establish and maintain corporate IT infrastructure standards for configuration and security.
• Ensure IT governance, audit and compliance requirements are met.

Continuity, Backup & Performance

• Define, implement, test and maintain data back-up and recovery protocols to ensure availability.
• Drive business continuity, backup, disaster recovery and infrastructure modernisation projects.
• Be accountable for measuring and optimising application and infrastructure performance, and lead recovery actions after system failures.
• Monitor and maintain infrastructure stability against defined KPIs.

Leadership, Vendor & Governance

• Provide support to, manage and train the IT Infrastructure team.
• Manage vendor relationships, budgets, SLAs and team performance.
• Project-plan with clear and concise communication methods.
• Prepare and maintain documentation of the IT infrastructure.

Additional Technical Competencies

The candidate must have experience in one or more of the following areas:

Network & Infrastructure Engineering

• Proficient understanding of IP networking: Cisco, TCP/IP, Window Server, Network Security, Cloud Servers that includes technical and functional understanding of network security, VOIP, WAN, LAN, and internet routing and switching protocols, wireless and VPN capabilities.
• Demonstrated Data Center/Server Room build out experience (Power, Network, Cooling, etc...).
• Expertise in VMware ESX, SAN, Monitoring tools, and Operating Systems (strong understanding of Windows).
• Experience in managing VMware environment.
• Experience in managing cloud-based infrastructure like AWS/Azure.
• Expertise in windows environment in domain/Forrest/DNS/DHCP. System Administration & Maintenance
• Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.
• Use of system management tool Kaseya and development of new scripts in this tool for deployment of policies.
• Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary.
• Manage processes to Create, change, and delete user accounts per request from HR.
• Repair and recover from hardware or software failures. Coordinate and communicate with impacted constituencies.

Security, Backups & Data Protection

• Skilled in managing websense/forcepoint DLP/Web security.
• Experience in managing Kaspersky antivirus system.
• Perform regular security monitoring to identify any possible intrusions.
• Perform daily backup operations, ensuring all required file systems and system data are successfully backed up to the appropriate media, recovery tapes or disks are created, and media is recycled and sent off site as necessary.
• Closely monitoring and developing the procedures for backups of the servers.
• Perform regular file archival and purge as necessary.

Monitoring, Testing & Troubleshooting

• Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.
• Daily monitor the Server Event Logs, Firewall and other security equipment logs and also the logs of scheduled archival software.
• Test the operating system software, the networking software and also the computer hardware.
• Must possess the initiative to resolve issues before they become critical.

Project Management & Documentation

• To assist IT Head for technical issues on various projects such as support on testing, rolling out and execution of projects.
• Strong written communication skills including documentation.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

We are looking for a Lead DevOps Engineer with strong hands-on experience in AWS, GCP, CI/CD, Kubernetes, Docker, Terraform, Pulumi and DevSecOps. The candidate will lead DevOps teams, drive technical delivery with client stakeholders, design scalable and secure cloud infrastructure, and establish best practices for automation, deployment, reliability, and cost optimization across cloud environments.

### Key Responsibilities

* Lead and mentor DevOps engineers, drive technical execution, and ensure timely delivery of client requirements.

* Engage with client teams and architects to understand requirements, provide technical guidance, and drive solution design and implementation.

* Design, implement, and optimize CI/CD pipelines, GitOps workflows, and automated release processes.

* Architect and manage cloud infrastructure across AWS and GCP (Azure optional) using Infrastructure as Code.

* Lead containerization and orchestration initiatives using Docker, Kubernetes, and Helm.

* Drive DevSecOps, observability, SRE practices, disaster recovery, and cloud cost optimization.

* Troubleshoot complex production issues, drive root cause analysis, and ensure system reliability, security, and performance.

* Collaborate with Development, QA, Security, Architecture, and client teams to drive engineering standards and continuous improvement.

### Mandatory Skills

* 7-9 years of experience in DevOps, Cloud Engineering, or Platform Engineering, including team leadership and client-facing responsibilities.

* Strong hands-on experience with AWS and GCP, including cloud infrastructure, networking, security, and managed services.

* Expertise in CI/CD tools such as Jenkins, Azure DevOps, GitLab CI/CD, GitHub Actions, or equivalent platforms.

* Strong experience with Docker, Kubernetes, Helm, and managed Kubernetes services such as AKS, EKS, or GKE.

* Hands-on expertise in Terraform and Ansible, with experience in Infrastructure as Code and configuration management.

* Experience with GitOps practices and tools such as Argo CD or Flux.

* Strong understanding of Git, branching strategies, release management, and deployment automation.

* Experience implementing DevSecOps practices, including security scanning, secrets management, and vulnerability management.

* Experience with monitoring, logging, alerting, production troubleshooting, and root cause analysis.

* Proficiency in Linux administration, networking fundamentals, and Bash/Python/PowerShell scripting.

* Proven ability to lead teams, manage priorities, communicate with clients, and drive technical decisions independently.

independently.

### Preferred Skills

* Knowledge of SAST/DAST, SBOM, software supply chain security, and security policy enforcement.

* Experience with observability tools such as Prometheus, Grafana, ELK Stack, Datadog, or Splunk.

* Experience with cloud migrations, hybrid environments, disaster recovery, high availability, and cost optimisation.

* Knowledge of service mesh technologies such as Istio or Consul, and API gateways or application gateways.

* Experience with enterprise cloud security, IAM, network security, and infrastructure

Key Responsibilities

• Automate application deployments from Bitbucket to servers using CI/CD pipelines.
• Design and manage scalable, highly available AWS infrastructure.
• Implement Auto Scaling, ELB, and Route 53 for traffic management and high availability.
• Work with AWS services including IAM, RDS, DynamoDB, EC2, and other cloud services.
• Build and manage Docker containers and server images.
• Deploy and manage applications using Kubernetes.
• Implement Infrastructure as Code using Terraform, CloudFormation, or Ansible.
• Develop automation scripts using Python and Bash.
• Implement monitoring and logging using tools such as Prometheus, Grafana, and ELK.
• Integrate security and compliance practices into CI/CD pipelines.
• Optimize infrastructure for security, scalability, performance, and cost.

Required Skills

• 3+ years of experience in DevOps or a similar role.
• Strong knowledge of AWS beyond EC2.
• Hands-on experience with Jenkins or similar CI/CD tools.
• Experience with Docker and Kubernetes.
• Good understanding of Terraform/IaC and automation.
• Proficiency in Python and/or Bash scripting.
• Knowledge of DevSecOps, security, and compliance best practices.
• Strong troubleshooting and problem-solving skills.

* Deploy and maintain company websites and HRM Cloud applications.

* Configure and manage cloud servers and Linux environments.

* Set up CI/CD pipelines using GitHub/GitHub Actions.

* Configure domains, DNS, SSL certificates, and HTTPS.

* Deploy frontend, backend/API, and database services.

* Configure production and staging environments.

* Manage Docker containers where required.

* Monitor server performance, uptime, logs, and application health.

* Implement regular database and server backups.

* Maintain security, access controls, firewalls, and server permissions.

* Troubleshoot deployment, server, network, and application issues.

* Work closely with Full-Stack Developers and QA teams.

* Maintain deployment documentation and technical procedures.

Required Skills

* AWS / Azure / DigitalOcean or equivalent cloud platform

* Linux server administration

* Git & GitHub

* CI/CD and GitHub Actions

* Docker

* Nginx / Apache

* DNS & domain configuration

* SSL/TLS and HTTPS

* Database deployment and backup

* Basic networking and security

* Monitoring and troubleshooting

* Experience deploying web applications to production

Preferred Skills

* Kubernetes

* Terraform / Infrastructure as Code

* Cloud security

* Load balancing

* Redis / caching

* PostgreSQL / MySQL / MongoDB

* Experience with Node.js, React, PHP/Laravel, or .NET applications

What We Offer

* Opportunity to work on HRM Cloud and SaaS products

* Exposure to real-world cloud infrastructure and production systems

* Remote/hybrid working opportunity

* Growth opportunities within the technology team

* Opportunity to work with an international product-focused company

How to Apply

Send your CV,GitHub profile, LinkedIn profile, and details of your previous cloud/DevOps projects.

Subject: Application – DevOps & Cloud Engineer

At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We’re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.

Learn more at www.shipthis.co

Role Overview

We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.

What You’ll be Doing

Security Operations

• Monitor infrastructure, application, and security alerts and assist with incident investigation.
• Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
• Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
• Track security issues and corrective actions through closure.

Vulnerability Management

• Run and review application and infrastructure vulnerability scans.
• Maintain a vulnerability register and coordinate remediation with engineering teams.
• Support VAPT and penetration-testing exercises and validate closure of findings.
• Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance & Governance

• Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
• Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
• Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
• Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM & Endpoint Security

• Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
• Maintain device inventory and monitor endpoint compliance.
• Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
• Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
• Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD & Cloud

• Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
• Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
• Automate repetitive deployment, infrastructure, security, and compliance tasks.
• Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
• Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.

Required Fundamentals

• Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
• Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
• Strong troubleshooting, ownership, attention to detail, and willingness to learn.

Desired Qualifications

• 1–2 years of experience with strong fundamentals are welcome.
• Basic scripting knowledge in Python, Bash, or similar.
• Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
• Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.

We Welcome Candidates:

• Who can join immediately
• Female candidates returning to work after a career break are strongly encouraged.

We are an equal opportunity employer and are committed to fostering diversity and inclusivity. We do not discriminate based on race, religion, color, gender, sexual orientation, age, marital status, or disability status.

Job Synopsys

Location: Bangalore

Job Type: Full-time, Permanent

Experience: 1-2 years

Industry: Software Product

Responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.
• Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
• Manage multiple application security initiatives concurrently while meeting strict timelines in a fast‑paced environment.
• Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
• Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
• Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
• Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
• Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.
• Participate in high‑severity or zero‑day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.
• Provide input into policies and standards related to application and cloud security controls.

Qualifications and Education Requirements

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
• 5-7 years of relevant experience in application security and/or vulnerability management.
• Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
• Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business‑logic vulnerabilities.
• Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
• Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.
• Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
• Excellent documentation, communication, and stakeholder engagement skills.

Desired Skills

• Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).
• Experience using the ServiceNow platform for vulnerability or incident tracking.
• Proficiency in Azure cloud and Azure DevOps environments.
• Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.

Software Engineer

Company Summary :

As the recognized global standard for project-based businesses, Deltek delivers software and information solutions to help organizations achieve their purpose. Our market leadership stems from the work of our diverse employees who are united by a passion for learning, growing and making a difference. At Deltek, we take immense pride in creating a balanced, values-driven environment, where every employee feels included and empowered to do their best work. Our employees put our core values into action daily, creating a one-of-a-kind culture that has been recognized globally. Thanks to our incredible team, Deltek has been named one of America's Best Midsize Employers by Forbes, a Best Place to Work by Glassdoor, a Top Workplace by The Washington Post and a Best Place to Work in Asia by World HRD Congress. www.deltek.com

Business Summary :

The Deltek Engineering and Technology team builds best-in-class solutions to delight customers and meet their business needs. We are laser-focused on software design, development, innovation and quality. Our team of experts has the talent, skills and values to deliver products and services that are easy to use, reliable, sustainable and competitive. If you're looking for a safe environment where ideas are welcome, growth is supported and questions are encouraged – consider joining us as we explore the limitless opportunities of the software industry.

Position Responsibilities:

• Collaborate with the development team to maintain, enhance, and scale the product for enterprise use.
• Design and develop scalable, high-performance solutions using cloud technologies and containerization.
• Contribute to all phases of the development lifecycle, following SOLID principles and best practices.
• Write well-designed, testable, and efficient code with a strong emphasis on Test-Driven Development (TDD), ensuring comprehensive unit, integration, and performance testing.
• Ensure software designs comply with specifications and security best practices.
• Contribute ideas to improve application maintainability and performance under the guidance of senior engineers.

AI-Specific Responsibilities:

• Integrate AI-powered tools and frameworks to enhance code quality and development efficiency.
• Utilize AI-driven analytics to identify performance bottlenecks and optimize system performance.
• Implement AI-based security measures to proactively detect and mitigate potential threats.
• Leverage AI for automated testing and continuous integration/continuous deployment (CI/CD) processes.
• Support the adoption and effective use of AI agents for automating repetitive development, deployment, and testing processes within the engineering team.

Qualifications :

• 2-3 years of software engineering experience, including at least 1 year of hands-on AI/ML experience.
• Proficient in Node.js and TypeScript/React development, with experience in React 18+, Hooks (useState, useEffect, useContext), and WebSocket clients.
• Strong full-stack development experience with modern web technologies.
• Experience with ASP.NET Core (C#) is good to have.
• Experience developing REST APIs.
• Proficiency in front-end technologies (JavaScript, HTML, CSS, Bootstrap, and UI frameworks).
• Strong knowledge of cloud platforms (AWS preferred), including scalability and enterprise cloud. 
• Experience with security best practices in web and API development.
• Experience with Test-Driven Development (TDD).
• Strong database experience, focused on query optimization 
• Strong analytical skills, problem-solving abilities, and curiosity to explore new technologies.
• Ability to communicate effectively, including explaining technical concepts to non-technical stakeholders.
• High commitment to continuous learning, innovation, and improvement.

AI-Specific Qualifications:

• Practical experience with prompt engineering and LLM response optimization
• Knowledge of AI-driven development tools and platforms such as Claude Code, GitHub Copilot in Agentic Mode.
• Knowledge of AI-based security protocols and threat detection systems.
• Experience integrating GenAI or Agentic AI agents into full-stack workflows (e.g., using AI for code reviews, automated bug fixes, or system monitoring).
• Demonstrated proficiency with AI-assisted development tools and prompt engineering for code generation, testing, or documentation.