Security Lead (DevSecOps, AWS & Kubernetes Security)
Role Overview
Own and drive security strategy across software delivery pipelines, cloud infrastructure, and containerized platforms.
Lead DevSecOps practices and guide the security team to keep applications and infrastructure secure, compliant, and audit-ready.
The role requires 8+ years of experience and is in person.
Key Skills for This Role
Full Job Posting
Role Summary
Own and drive security strategy across software delivery pipelines, cloud infrastructure, and containerized platforms.
Lead DevSecOps practices and guide the security team to keep applications and infrastructure secure, compliant, and audit-ready.
The role requires 8+ years of experience and is in person.
Key Responsibilities
- Lead GitLab CI security stages for SAST, DAST, SCA, and vulnerability scanning.
- Integrate SonarQube, OWASP ZAP, Trivy, Syft, and Grype into build and deployment pipelines.
- Drive software supply-chain security with SBOM generation and Cosign image signing.
- Set Kubernetes security standards with Kyverno, OPA/Gatekeeper, and RBAC.
- Own AWS security services, secrets and certificate management, Linux and Docker hardening.
- Lead SIEM monitoring, VAPT coordination, remediation tracking, and compliance alignment.
- Partner with technical and compliance teams, mentor engineers, and report security posture.
Required Skills
- Application security: SAST, DAST, SCA, vulnerability scanning, and OWASP Top 10.
- CI/CD security using GitLab CI and tools including Trivy, SonarQube, OWASP ZAP, Syft, Grype, and Cosign.
- Kubernetes and container security with Kyverno, OPA/Gatekeeper, Docker security, and RBAC.
- AWS security, HashiCorp Vault, certificate management, Linux hardening, SIEM, VAPT, ISO 27001, and DPDP awareness.
Qualifications and Certifications
- Bachelor's degree in Computer Science, IT, or a related field, or equivalent practical experience.
- 8 years of SAST, DAST, SCA, and vulnerability-scanning experience are required.
- 8 years of build-pipeline integration experience with SonarQube, OWASP ZAP, Trivy, Syft, and Grype are required.
- AWS Certified Security or AWS Solutions Architect Associate certification is listed as required.
- CKS, KCSA, and CEH certifications are listed as preferred.
Work Location
- Work location is in person.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Codeguardian Tech International Pvt Ltd.
Application Developer-Mobile
, IND
The employer seeks a React Native Developer to build, test, and release cross-platform mobile apps for Android and iOS. The role requires 3–5 years of mobile development experience, hands-on React Native expertise, JavaS
Application Developer - EAI
, IND
The employer is seeking a senior technical lead to own technical delivery for enterprise integration squad assignments. The role designs and maintains IBM ACE and IIB integrations, guides team members, and supports deplo
Network Support Engineer
, IND
The employer is seeking a Network Support Engineer to provide end-to-end support for hardware, software, networks, and IT infrastructure. The role covers troubleshooting, maintenance, patching, security, user support, in