Senior DevSecOps Engineer

About the role

Tech Mahindra is looking for a Senior DevSecOps Engineer to join its Cloud, Application & Container Security Chapter. The role will drive secure‑by‑design practices across software supply chains, container platforms, Kubernetes environments and cloud ecosystems.

Key responsibilities

• Define and implement security controls for applications, containers, Kubernetes clusters and cloud platforms.
• Embed SAST, SCA, DAST, container scanning and policy enforcement into CI/CD pipelines.
• Promote shift‑left security by encouraging secure coding, auto‑remediation and security automation.
• Implement container trust, image signing, SBOM, provenance and hardened base‑image strategies.
• Collaborate with DevOps, platform engineering and cyber teams to improve security posture throughout the SDLC.
• Explore AI/ML‑enabled solutions for vulnerability prioritisation and runtime protection.

Required profile

• 7+ years of experience in security engineering, with at least 3 years focused on Kubernetes/container security and DevSecOps.
• Hands‑on experience building CI/CD pipelines that integrate security testing tools.
• Strong knowledge of cloud platforms (AWS, Azure or GCP) and Infrastructure‑as‑Code tools.
• Familiarity with security frameworks such as OWASP Top 10, NIST, Zero Trust, Essential 8, PKI and cryptography.

Required skills

• Kubernetes & Docker
• CI/CD pipeline tooling (SAST, SCA, DAST, container scanning)
• Python or Go scripting
• Terraform / CloudFormation
• AWS, Azure, GCP
• Security frameworks: OWASP Top 10, NIST, Zero Trust, Essential 8, PKI, cryptography