DevSecOps Engineer

At SimYog Technology, we are redefining how the automotive and semiconductor industries approach Electromagnetic Compatibility (EMC) and Compliance Simulation. If you’re passionate about engineering innovation and love solving complex challenges, we’d love to hear from you!

About the role:

DevSecOps Engineer

Roles and Responsibilities

• Manage on-prem and cloud build infrastructure (e.g., Jenkins, Bitbucket pipelines) across Windows and Linux platforms
• Design, implement, and maintain CI/CD pipelines for desktop application builds
• Build automation around desktop-specific technologies such as MSI/DMG packaging, signing, and auto-update frameworks.
• Manage build environments, artifact repositories, code-signing infrastructure, and related tooling.
• Optimize build performance, reliability, and reproducibility.
• Develop internal tools and scripts to improve developer productivity and security posture (Python, PowerShell, Bash, etc.).
• Embed security scanning (SAST, SCA, secrets scanning, dependency checks) into CI/CD pipelines.
• Ensure secure code signing, certificate rotation, and integrity verification for desktop releases.
• Work with Engineering to enforce secure coding guidelines and mitigate vulnerabilities.
• Implement and manage security controls for build systems, deployment infrastructure, and development tooling.
• Support threat modeling, risk assessments, and secure design reviews.
• Partner with development teams to identify security gaps early and shift-left security practices.
• Collaborate with QA to integrate automated tests and security checks into pipelines.
• Contribute to incident response and post-mortems related to build or release issues.
• Document processes, standards, and best practices for secure development and release.

Required Skills

• 3–5+ years in DevOps, Security Engineering, or related roles.
• Experience with CI/CD platforms (Jenkins, Bitbucket pipelines).
• Strong scripting skills (Python, Bash, PowerShell).
• Hands-on experience with security scanning tools (SAST, SCA, dependency scanning, container scanning).
• Understanding of secure build pipelines, code signing, and artifact integrity.
• Experience with desktop application build tools (MSBuild, CMake).
• Solid understanding of OS internals (Windows, Ubuntu, Redhat) from a developer or operations perspective
• Good understanding of job schedulers (LSF) and network file systems

Preferred Skills

• Experience building installers (MSI/DMG/PKG), auto-updaters
• Experience in Installshield, Licensing using Flexlm
• Understanding of static code analysis, code coverage methods
• Familiarity with hardening build infrastructure (zero-trust principles, credential hygiene, secrets management).
• Experience with vulnerability management processes and tooling.
• Familiarity with containerization and virtualization for build automation (Docker, VMs).

Relevant Education + Experience

• Bachelor’s degree in Engineering, Computer Science or related field
• 2–3 years of professional DevSecOps experience

Job Type:

• Job Location:

  Bengaluru