DevSecOps & Cloud Security Engineer - CI/CD & Terraform

PureLogics is looking for a DevOps Engineer with a strong security focus to build and protect secure infrastructure and delivery pipelines. You’ll combine DevOps, cloud, and security engineering: automating security testing, running penetration tests, and working with developers to embed security throughout the software development lifecycle.

Key Responsibilities

• Implement security tools and best practices in CI/CD pipelines to automate security testing and vulnerability assessments
• Design, deploy, and manage secure infrastructure using Infrastructure as Code (Terraform, CloudFormation, or Ansible)
• Lead and perform ethical hacking, penetration testing, and security audits to identify vulnerabilities, assess risks, and recommend mitigations
• Conduct penetration testing on applications, networks, and cloud environments using tools like Burp Suite, Metasploit, Nmap, and Kali Linux
• Develop, maintain, and enhance security-focused regression testing frameworks
• Monitor and respond to security threats using SIEM tools such as Splunk, ELK, or AWS Security Hub, and carry out remediation
• Participate in incident response and post-incident analysis
• Collaborate with cross-functional teams and developers to define and integrate secure DevOps practices into the SDLC
• Ensure adherence to security compliance frameworks (NIST, CIS, ISO 27001, SOC 2) and support security audits
• Implement security hardening for applications, networks, and infrastructure
• Develop and enforce policies for secrets management, IAM, and RBAC
• Automate security scanning, configuration management, and patch management
• Conduct threat modeling and risk assessments to improve security posture
• Stay current with the latest security threats, vulnerabilities, and industry trends

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field
• Minimum 2 years of experience in DevSecOps, Security Engineering, or a related field
• Hands-on experience in penetration testing, ethical hacking, and security automation

Skills

Technical Skills

• Cloud platforms: AWS, Azure, GCP
• Containerization: Docker, Kubernetes, OpenShift
• Infrastructure as Code: Terraform, CloudFormation, Ansible
• CI/CD security and security automation
• Penetration testing tools: Burp Suite, Metasploit, Nmap, Kali Linux
• SIEM tools: Splunk, ELK, AWS Security Hub
• Security compliance frameworks: NIST, CIS, ISO 27001, SOC 2
• Secrets management, IAM, and RBAC
• Threat modeling and risk assessment

Soft Skills

• Cross-functional collaboration
• Continuous learning
• Ability to handle tough challenges

Benefits

• Annual paid leaves
• Leave encashment
• Paid certifications
• Health and life insurance
• Provident fund
• Child education program
• Referral bonus program
• Car and bike finance program
• Monthly achievements
• Public holiday and weekend compensation