11+ SCA Jobs in Bangalore (Bengaluru) | SCA Job openings in Bangalore (Bengaluru)

SENIOR INFORMATION SECURITY ENGINEER (DEVSECOPS)

Key Skills: Software Development Life Cycle (SDLC), CI/CD

About Company: Consumer Internet / E-Commerce

Company Size: Mid-Sized

Experience Required: 6 - 10 years

Working Days: 5 days/week

Office Location: Bengaluru [Karnataka]

Review Criteria:

Mandatory:

• Strong DevSecOps profile
• Must have 5+ years of hands-on experience in Information Security, with a primary focus on cloud security across AWS, Azure, and GCP environments.
• Must have strong practical experience working with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud, Wiz, or Orca along with SIEM / IDS / IPS platforms
• Must have proven experience in securing Kubernetes and containerized environments including image security,runtime protection, RBAC, and network policies.
• Must have hands-on experience integrating security within CI/CD pipelines using tools such as Snyk, GitHub Advanced Security,or equivalent security scanning solutions.
• Must have solid understanding of core security domains including network security, encryption, identity and access management key management, and security governance including cloud-native security services like GuardDuty, Azure Security Center etc
• Must have practical experience with Application Security Testing tools including SAST, DAST, and SCA in real production environments
• Must have hands-on experience with security monitoring, incident response, alert investigation, root-cause analysis (RCA), and managing VAPT / penetration testing activities
• Must have experience securing infrastructure-as-code and cloud deployments using Terraform, CloudFormation, ARM, Docker, and Kubernetes
• B2B SaaS Product companies
• Must have working knowledge of globally recognized security frameworks and standards such as ISO 27001, NIST, and CIS with exposure to SOC2, GDPR, or HIPAA compliance environments

Preferred:

• Experience with DevSecOps automation, security-as-code, and policy-as-code implementations
• Exposure to threat intelligence platforms, cloud security monitoring, and proactive threat detection methodologies, including EDR / DLP or vulnerability management tools
• Must demonstrate strong ownership mindset, proactive security-first thinking, and ability to communicate risks in clear business language

Roles & Responsibilities:

We are looking for a Senior Information Security Engineer who can help protect our cloud infrastructure, applications, and data while enabling teams to move fast and build securely.

This role sits deep within our engineering ecosystem. You’ll embed security into how we design, build, deploy, and operate systems—working closely with Cloud, Platform, and Application Engineering teams. You’ll balance proactive security design with hands-on incident response, and help shape a strong, security-first culture across the organization.

If you enjoy solving real-world security problems, working close to systems and code, and influencing how teams build securely at scale, this role is for you.

What You’ll Do-

Cloud & Infrastructure Security:

• Design, implement, and operate cloud-native security controls across AWS, Azure, GCP, and Oracle.
• Strengthen IAM, network security, and cloud posture using services like GuardDuty, Azure Security Center and others.
• Partner with platform teams to secure VPCs, security groups, and cloud access patterns.

Application & DevSecOps Security:

• Embed security into the SDLC through threat modeling, secure code reviews, and security-by-design practices.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
• Secure infrastructure-as-code and containerized workloads using Terraform, CloudFormation, ARM, Docker, and Kubernetes.

Security Monitoring & Incident Response:

• Monitor security alerts and investigate potential threats across cloud and application layers.
• Lead or support incident response efforts, root-cause analysis, and corrective actions.
• Plan and execute VAPT and penetration testing engagements (internal and external), track remediation, and validate fixes.
• Conduct red teaming activities and tabletop exercises to test detection, response readiness, and cross-team coordination.
• Continuously improve detection, response, and testing maturity.

Security Tools & Platforms:

• Manage and optimize security tooling including firewalls, SIEM, EDR, DLP, IDS/IPS, CSPM, and vulnerability management platforms.
• Ensure tools are well-integrated, actionable, and aligned with operational needs.

Compliance, Governance & Awareness:

• Support compliance with industry standards and frameworks such as SOC2, HIPAA, ISO 27001, NIST, CIS, and GDPR.
• Promote secure engineering practices through training, documentation, and ongoing awareness programs.
• Act as a trusted security advisor to engineering and product teams.

Continuous Improvement:

• Stay ahead of emerging threats, cloud vulnerabilities, and evolving security best practices.
• Continuously raise the bar on a company's security posture through automation and process improvement.

Endpoint Security (Secondary Scope):

• Provide guidance on endpoint security tooling such as SentinelOne and Microsoft Defender when required.

Ideal Candidate:

• Strong hands-on experience in cloud security across AWS and Azure.
• Practical exposure to CSPM tools (e.g., Prisma Cloud, Wiz, Orca) and SIEM / IDS / IPS platforms.
• Experience securing containerized and Kubernetes-based environments.
• Familiarity with CI/CD security integrations (e.g., Snyk, GitHub Advanced Security, or similar).
• Solid understanding of network security, encryption, identity, and access management.
• Experience with application security testing tools (SAST, DAST, SCA).
• Working knowledge of security frameworks and standards such as ISO 27001, NIST, and CIS.
• Strong analytical, troubleshooting, and problem-solving skills.

Nice to Have:

• Experience with DevSecOps automation and security-as-code practices.
• Exposure to threat intelligence and cloud security monitoring solutions.
• Familiarity with incident response frameworks and forensic analysis.
• Security certifications such as CISSP, CISM, CCSP, or CompTIA Security+.

Perks, Benefits and Work Culture:

A wholesome opportunity in a fast-paced environment that will enable you to juggle between concepts, yet maintain the quality of content, interact and share your ideas and have loads of learning while at work. Work with a team of highly talented young professionals and enjoy the comprehensive benefits that company offers.

Client: Sony Corporation

Position: 3

Exp: 5-8Years

DevOps Engineer

Location: Bangalore

Budget: 16.5 LPA Max

Gerrit ,Jenkins, Rabbit MQ AWS Linux
Python ,Ansible, Tomcat ,Postgresql
Grafana ,Groovy,HTML,Shell,Apache,Git , ELK

Lead Engineer - 

Responsibilities:

• Leads a project end-to-end and collaborates across functions. Drives planning, estimation and execution.
• Understands requirements well and comes up with efficient design
• Develops complex, well backed and bug-free products. Estimates accurately.
• Takes well-reasoned tech decisions keeping in mind goals and trade-offs
• Becomes a go-to person in more than one area. Provide technical mentoring to team
• Communicates clearly, gets clarifications and establishes expectations for all parties
• Helps establish SDLC best practices and high standards of code quality
• Demonstrates excellent problem solving & debugging skills
• Proactively identifies and resolves issues in requirements, design and code
• Perform peer code reviews and help us all get better.

Requirements:

• Solid experience in JAVA and Kotlin.
• Should have experience in Reactive programming, Asynchronous programming and Unit Testing.
• Has an ability to quickly learn and contribute in multiple codebase.
• Overcomes roadblocks and requires minimal oversight
• Takes initiatives to fix issues/tech debts before assigned to him/her.
• Able to deep dive into codebase and advise QA of possible regression impact.
• Communicates tech decisions through design docs and tech talks.
• Has delivered projects with end-to-end accountability.
• Keeps track of industry trends and introduces right tech/tools for a given job.
• Excellent understanding of software engineering practices, Design Patterns, Data Structures, Algorithms.
• 5+ years of experience in a product-driven organisation.

Primary Responsibilities

• Design, architect and develop advanced software solutions in a cross functional Agile team supporting multiple projects and initiatives
• Collaborate with product owners and/or the business on requirements definition, development of functional specifications, and design
• Collaborate on or lead development of technical design and specifications as required
• Code, test and document new applications as well as changes to existing system functionality and ensure successful completion
• Take on leadership roles as needed

Skills & Requirements

• Bachelor’s Degree required, preferably in Computer Science or related field
• 3+ years of software development experience using GoLang/Java programming language
• Experience with cloud technologies (AWS/Azure/GCP/Pivotal Cloud Foundry/any private cloud) and containerization is required
• AWS - experience in extensive use of AWS offerings like Redis, Kafka etc.
• Experience with a micro-services architecture is a plus
• Excellent communication, collaboration, reporting, analytical and problem-solving skills
• Experience with PostgreSQL or other Relational Databases
• Test-driven development mindset and a focus on quality, scalability, and performance
• Strong programming fundamentals and ability to produce high quality code
• Solid understanding of Agile (SCRUM) Development Process required

Skills Needed

• Hands-on extensive Salesforce experience
• Experience in lightning implementation, LWC
• Ability to Perform configuration, customization, integration and support of Salesforce.com
• Hands-on Experience in customizing using APEX, Triggers, Batch Apex, Visualforce, etc
• Understanding of the Salesforce.com data model
• Must-Have hands-on experience on Deployments using Change set, , Managing release dependencies across multiple projects
• Understanding the release management and software development life cycle

• Manage and Develop the Digital Performance Channels
• Ownership of Top-line building channels like Google Shopping, Google Remarketing, Third Parties for Remarketing
• Continuously chase ambitious targets of ROAS while maintaining min Top Line thresholds
• Build effective journeys of remarketing to reduce the overlaps and shorten the touchpoints to convert
• Exploration of new channels to drive Performance Marketing
• Be an actor of your channel ecosystem
• Owner mindset, willingness to take initiatives, and accountability to drive closures
• Be the key contact window between Users and the technical team
• Challenge the needs and demonstrate managerial courage towards users satisfaction
• Develop, through your posture, a collaborative working methodology, an environment of trust and responsibility among the product team

AN IDEAL CANDIDATE WILL HAVE

• Passion for sport, you like to enjoy the sport with your teammates
• You have an entrepreneurial mindset, a strong sense of responsibility, autonomy, and drive for results
• Recognized capacity to understand business needs, bring structure in a complex environment, and lead action plans
• Strong data analysis skills, ability to perform data analysis and make data-driven decisions
• You are a technology enthusiast; you care about how things work, and you can successfully collaborate with technical experts
• You are well versed with Google Shopping and Remarketing as a subject
• A prior experience in performance marketing/e-commerce is required.

EXPERIENCE

• 3-12 years of experience in the digital eco-system
• Prior experience in performance marketing agencies is a plus
• A Masters degree in marketing is a plus