
Senior Information Security Engineer (DevSecOps)
at E-Commerce Industry
SENIOR INFORMATION SECURITY ENGINEER (DEVSECOPS)
Key Skills: Software Development Life Cycle (SDLC), CI/CD
About Company: Consumer Internet / E-Commerce
Company Size: Mid-Sized
Experience Required: 6 - 10 years
Working Days: 5 days/week
Office Location: Bengaluru [Karnataka]
Review Criteria:
Mandatory:
- Strong DevSecOps profile
- Must have 5+ years of hands-on experience in Information Security, with a primary focus on cloud security across AWS, Azure, and GCP environments.
- Must have strong practical experience working with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud, Wiz, or Orca along with SIEM / IDS / IPS platforms
- Must have proven experience in securing Kubernetes and containerized environments including image security,runtime protection, RBAC, and network policies.
- Must have hands-on experience integrating security within CI/CD pipelines using tools such as Snyk, GitHub Advanced Security,or equivalent security scanning solutions.
- Must have solid understanding of core security domains including network security, encryption, identity and access management key management, and security governance including cloud-native security services like GuardDuty, Azure Security Center etc
- Must have practical experience with Application Security Testing tools including SAST, DAST, and SCA in real production environments
- Must have hands-on experience with security monitoring, incident response, alert investigation, root-cause analysis (RCA), and managing VAPT / penetration testing activities
- Must have experience securing infrastructure-as-code and cloud deployments using Terraform, CloudFormation, ARM, Docker, and Kubernetes
- B2B SaaS Product companies
- Must have working knowledge of globally recognized security frameworks and standards such as ISO 27001, NIST, and CIS with exposure to SOC2, GDPR, or HIPAA compliance environments
Preferred:
- Experience with DevSecOps automation, security-as-code, and policy-as-code implementations
- Exposure to threat intelligence platforms, cloud security monitoring, and proactive threat detection methodologies, including EDR / DLP or vulnerability management tools
- Must demonstrate strong ownership mindset, proactive security-first thinking, and ability to communicate risks in clear business language
Roles & Responsibilities:
We are looking for a Senior Information Security Engineer who can help protect our cloud infrastructure, applications, and data while enabling teams to move fast and build securely.
This role sits deep within our engineering ecosystem. You’ll embed security into how we design, build, deploy, and operate systems—working closely with Cloud, Platform, and Application Engineering teams. You’ll balance proactive security design with hands-on incident response, and help shape a strong, security-first culture across the organization.
If you enjoy solving real-world security problems, working close to systems and code, and influencing how teams build securely at scale, this role is for you.
What You’ll Do-
Cloud & Infrastructure Security:
- Design, implement, and operate cloud-native security controls across AWS, Azure, GCP, and Oracle.
- Strengthen IAM, network security, and cloud posture using services like GuardDuty, Azure Security Center and others.
- Partner with platform teams to secure VPCs, security groups, and cloud access patterns.
Application & DevSecOps Security:
- Embed security into the SDLC through threat modeling, secure code reviews, and security-by-design practices.
- Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
- Secure infrastructure-as-code and containerized workloads using Terraform, CloudFormation, ARM, Docker, and Kubernetes.
Security Monitoring & Incident Response:
- Monitor security alerts and investigate potential threats across cloud and application layers.
- Lead or support incident response efforts, root-cause analysis, and corrective actions.
- Plan and execute VAPT and penetration testing engagements (internal and external), track remediation, and validate fixes.
- Conduct red teaming activities and tabletop exercises to test detection, response readiness, and cross-team coordination.
- Continuously improve detection, response, and testing maturity.
Security Tools & Platforms:
- Manage and optimize security tooling including firewalls, SIEM, EDR, DLP, IDS/IPS, CSPM, and vulnerability management platforms.
- Ensure tools are well-integrated, actionable, and aligned with operational needs.
Compliance, Governance & Awareness:
- Support compliance with industry standards and frameworks such as SOC2, HIPAA, ISO 27001, NIST, CIS, and GDPR.
- Promote secure engineering practices through training, documentation, and ongoing awareness programs.
- Act as a trusted security advisor to engineering and product teams.
Continuous Improvement:
- Stay ahead of emerging threats, cloud vulnerabilities, and evolving security best practices.
- Continuously raise the bar on a company's security posture through automation and process improvement.
Endpoint Security (Secondary Scope):
- Provide guidance on endpoint security tooling such as SentinelOne and Microsoft Defender when required.
Ideal Candidate:
- Strong hands-on experience in cloud security across AWS and Azure.
- Practical exposure to CSPM tools (e.g., Prisma Cloud, Wiz, Orca) and SIEM / IDS / IPS platforms.
- Experience securing containerized and Kubernetes-based environments.
- Familiarity with CI/CD security integrations (e.g., Snyk, GitHub Advanced Security, or similar).
- Solid understanding of network security, encryption, identity, and access management.
- Experience with application security testing tools (SAST, DAST, SCA).
- Working knowledge of security frameworks and standards such as ISO 27001, NIST, and CIS.
- Strong analytical, troubleshooting, and problem-solving skills.
Nice to Have:
- Experience with DevSecOps automation and security-as-code practices.
- Exposure to threat intelligence and cloud security monitoring solutions.
- Familiarity with incident response frameworks and forensic analysis.
- Security certifications such as CISSP, CISM, CCSP, or CompTIA Security+.
Perks, Benefits and Work Culture:
A wholesome opportunity in a fast-paced environment that will enable you to juggle between concepts, yet maintain the quality of content, interact and share your ideas and have loads of learning while at work. Work with a team of highly talented young professionals and enjoy the comprehensive benefits that company offers.

Similar jobs
Company
SkillLiftt Edtecch LLP is a pioneering education technology startup dedicated to transforming technical education through its unique Future Technologies & Modern Practices (FTMP) 4.0 program. Based in Karnataka, the company bridges the gap between traditional academic syllabi and modern industry requirements by providing intensive, mentorship-driven training in high-demand fields. SkillLiftt’s mission is to empower the next generation of "AI-native" engineers through a curriculum focused on production-ready projects, professional internships, and guidance from industry experts.
Role Overview
We are seeking an inspiring Soft Skills trainer who doesn't just "deliver lectures" but facilitates transformation. You will coach students to articulate their "Proof of Work"—translating complex technical projects into compelling narratives for global recruiters.
Key Responsibilities
• Integrated Mentoring: Lead interactive sessions using role-plays and simulations to bridge the gap between technical data and business impact.
• Personal Branding: LinkedIn optimization and resume writing for the 2026 job market.
• Data-Driven Assessment: Use 5-point rubrics to track student competency growth and provide objective, actionable feedback.
• Placement Readiness: Conduct intensive "Interview Mastery" workshops and "Work Culture" sessions before each of the 8 professional internships students undergo.
• Stakeholder Collaboration: Partner with industry mentors to ensure soft skills are woven into the fabric of semester-long engineering projects.
Required Skills & Qualifications
• Experience: 3–10 years in soft skills training, corporate coaching, or talent development (experience with engineering/STEM students is a major plus).
• Technical Literacy: Proficiency with modern training tools (Mentimeter, Google Workspace)
• Education: Bachelor’s or Master’s in HR, Psychology, Communications, or related fields
• Certifications: ICF, Toastmasters, CPT, or ATD certifications are strongly preferred. Though equivalent practical experience will also be considered
What We Offer
• Career Path: Clear growth from Mentor to Training Director or Chief Trainer.
• Impact: Directly influence the career outcomes of 1,000+ students across all branches.
• Compensation: Competitive salary + performance-linked bonuses.
Location: On-site Ballari, Karnataka.
Python is a high-level, general-purpose programming language. Its design philosophy emphasizes code readability with the use of significant indentation. Python is dynamically type-checked and garbage-collected.
We are looking for a skilled and motivated Data Engineer with strong experience in Python programming and Google Cloud Platform (GCP) to join our data engineering team. The ideal candidate will be responsible for designing, developing, and maintaining robust and scalable ETL (Extract, Transform, Load) data pipelines. The role involves working with various GCP services, implementing data ingestion and transformation logic, and ensuring data quality and consistency across systems.
Key Responsibilities:
- Design, develop, test, and maintain scalable ETL data pipelines using Python.
- Work extensively on Google Cloud Platform (GCP) services such as:
- Dataflow for real-time and batch data processing
- Cloud Functions for lightweight serverless compute
- BigQuery for data warehousing and analytics
- Cloud Composer for orchestration of data workflows (based on Apache Airflow)
- Google Cloud Storage (GCS) for managing data at scale
- IAM for access control and security
- Cloud Run for containerized applications
- Perform data ingestion from various sources and apply transformation and cleansing logic to ensure high-quality data delivery.
- Implement and enforce data quality checks, validation rules, and monitoring.
- Collaborate with data scientists, analysts, and other engineering teams to understand data needs and deliver efficient data solutions.
- Manage version control using GitHub and participate in CI/CD pipeline deployments for data projects.
- Write complex SQL queries for data extraction and validation from relational databases such as SQL Server, Oracle, or PostgreSQL.
- Document pipeline designs, data flow diagrams, and operational support procedures.
Required Skills:
- 4–8 years of hands-on experience in Python for backend or data engineering projects.
- Strong understanding and working experience with GCP cloud services (especially Dataflow, BigQuery, Cloud Functions, Cloud Composer, etc.).
- Solid understanding of data pipeline architecture, data integration, and transformation techniques.
- Experience in working with version control systems like GitHub and knowledge of CI/CD practices.
- Strong experience in SQL with at least one enterprise database (SQL Server, Oracle, PostgreSQL, etc.).
Greeting from DevCare Solutions!!!
Job Description:
We're looking for an experienced US Healthcare Recruiter to join our team. The ideal candidate should have a stable profile and prior experience with RN, LPN, LVN, CNA,STNA roles. This on-site position offers flexibility and a dynamic work environment. Functional Area: IT – Software Candidate Requirement Position: US Healthcare Recruiter
Location: Chennai (On-Site - WFO)
Experience: 0.6-3 Years
Requirement: US Healthcare experience is a must. Experience: 1 - 3 years Qualification: Graduate in Education
About us:
Devcare Solution is a place where a best-in-class working environment, professional management, and opportunities to learn exist bundled with exceptional rewards. It is ready to take more on board for all those who deserve a dream career. The team is full of good spirits complimenting each one's brilliance at workplace. Needless to say about the interesting projects, you for sure will gain an enriching positive experience every moment.
Name of the company: DevCare Solutions
Year of establishment: April 19th, 2005
Company address: No 4, Ram complex, Padasalai Street, Urapakkam, Chennai 603210
It's Complete US Shift Onsite
Shift Timing will be 7.00pm to 4.00am IST
Cab: Pick and Drop Available
Dinner will provided in the company
www.devcare..com
Job Description Essential Functions:
- Financial analysis knowledge
- Excellent English to enable customer communication (Written and Verbal)
- Ability to handle any customer interaction professional and with a service-oriented attitude
- Reliable and precise work style, even under time pressure
- Excel / PowerPoint Skills.
- Experience in telecom industry is a plus
Required Skills:
- Inventory Management - In-depth knowledge of Inventory and components for building Telecom Inventory.
- Should have worked on Inventory creation for a minimum period of 2-3 years for both Voice and Data service.
- Good knowledge on Vendor portal for various global Telecom vendors.
- Should be able to work as an individual contributor.
- Should have experience on client engagements.
- Good knowledge on Vendor reports and CSRs
- Good Communication is must.
- Good understanding on Telecom products and services.
- Additional knowledge of Wireless is a plus
Soft skills:
- Good communication skills (Written & Oral)
- Flexible to work in the evening shifts
- Individual and team player
We are looking for a sincere and enterprising intern to join our HR Team!
Women on Break are welcome to join!
This is an internship opportunity for anyone seeking opportunities in recruitment.
Location : Bangalore
Roles and Responsibilities :
-Sourcing candidates from different channels (Naukri, LinkedIn, social media)
-Upload and manage job postings
-Screen Cvs according to requirement
-Understand and communicate with Candidates for requirements
-Maintain metrics, data
-Guide candidates from interview till onboarding
-Social media knowledge
Qualification/Eligibility
BBA, MBA, B.E./B.Tech/MCA with Good Communication skill
A minimum 6 months experience.
Primary Responsibilities
- Architect and drive complex software performance improvement projects that mitigate the performance challenges of the product and establish new guidelines for future product features
- Work with the development team, and database administrators to analyze performance bottlenecks, make recommendations to address performance concerns, and co-design performance into new feature development
- Efficiently working with various profiling and monitoring tools to identify performance and concurrency bottlenecks, propose and implement optimizations to improve cloud product
- Review end-user usage patterns and customer logged performance defects and enhance performance test coverage based on gaps identified.
- Understand database internals, server and storage system design, application interactions with database queries and stored procedures and with other downstream systems
- Troubleshoot issues experienced by users and propose solutions
Basic Qualifications
- 8+ years of experience in implementing and driving software performance engineering projects and solutions. Advanced level experience with concurrency, multithreading, and distributed system architectures
- Experience analyzing performance bottlenecks with application code interfacing with databases using ORM Frameworks, cache layers, data storage, servers, networking, and database query protocols including developing stored procedures, SQL queries, and database applications
- Working knowledge of relational database internals (locking, consistency, replication, serialization, failover, recovery)
- Comfortable with Windows, SQL Server, .NET Framework/Core, GIT, Nuget, SPA, Modern UI Frameworks, ORM Framework NHibernate in terms of both tools and application development
- Passionate about finding software performance bottlenecks and optimizing code to produce a better customer experience
- Experience with APM (Application Performance Monitoring), RUM (Real User Monitoring), and other Dev tools used for Performance monitoring and analysis
- Experience with performance bottleneck analysis, system design for scaling
Technical Support Manager
Full Time, Permanent
About Bizongo:
-
Good understanding and work experience with Linux, Java, Spring Boot, SQL, one of RDBMS Database
-
Good Understanding of AWS Infrastructure including EC2
Bizongo is featured in LinkedIn Top Startups 2019: The 25 hottest Indian companies to work for!
Working in Bizongo translates into being a part of a dynamic start-up with some of the most enthusiastic, hardworking and intelligent people in a fast paced and electrifying environment
Bizongo has been awarded as the most Disruptive Procurement Startup of the year - 2017
Being a company that is expanding itself every day and working towards exploring newer avenues in the market, every employee grows with the company
The position provides a chance to build on existing talents, learn new skills and gain valuable experience in the field of Ecommerce
We’re looking for a Senior Android developer who will take a key role in our team. You will be working alongside other engineers and developers, collaborating on the various layers of the infrastructure.
Responsibilities:
- Design and build advanced application features for the Android platform.
- Collaborate with cross-functional teams to define, design, and ship new features.
- Work with outside data sources and APIs.
- Unit-test code for robustness, including edge cases, usability, and general reliability.
- Resolving/ fixing bugs and improving application performance.
- Continuously discover, evaluate, and implement new technologies to maximize development efficiency.
Requirements:
- Proven software development experience and Android skills development.
- Proven working experience in Android app development and Kotlin.
- Have published at least one original Android app.
- Experience with Android SDK.
- Experiece with Flutter Development
- Experience working with remote data via REST and JSON.
- Experience with third-party libraries and APIs.
- Working knowledge of the general mobile landscape, architecture, threading, offline data storage, trends, and emerging technologies.
- Solid understanding of the full mobile development life cycle.













