Jobs

Interviews
Job Alerts
Tools

Upskill and Grow with AI

Mock Interview Practice interviews in realistic simulations

Coding Practice Improve your coding skills with challenges

Certification Earn certifications to validate your skills

AI Learning Get trained with AI expert sessions

Career Path AI insights for smarter career decisions

AI Job Match Score AI-Powered Job Match Against Your Resume and Optimize Your Resume

Career Tools and Resources

Resume Builder Build Professional Resume with Ease

ATS Friendliness Check Check Resume Friendliness for Applicant Tracking Systems

Auto Apply Apply to hundreds of jobs on any platform effortlessly

Co-Pilot (Chrome Extension) Your AI Assistant for Seamless Browsing Efficiency

Interview Questions Streamline interviews with ready-to-use questions

Salaries Discover market-driven salary insights across skillsets and geographies

Companies Explore leading companies actively hiring talent
For Employers

Home
>
Jobs in chennai
>
Capgemini
>
DevSecOps Security Engineer

DevSecOps Security Engineer

Capgemini

6 - 9 years

12 - 20 Lacs

chennai

Posted:2 days ago| Platform:

Apply

Skills Required

security engineering devsecops splunk

Work Mode

Hybrid

Job Type

Full Time

Job Description

Job Title: DevSecOps Security Engineer

Experience: 6-9yrs

Location: Chennai

Notice Period: immediate to 30 days

Overview
The DevSecOps Security Engineer will embed security into modern delivery for our customer environment. Based in Chennai, India, this hands-on role partners with local Engineering/DevOps to secure CI/CD pipelines, Kubernetes workloads, runtime environments, and threat hunting activities in alignment with enterprise standards.

Key Responsibilities

A) DevSecOps Enablement

Pipeline Security:
Integrate automated scans (SAST, SCA, IaC, container) into CI/CD (GitHub, Jenkins, Argo CD); enforce quality gates and break-glass workflows.
IaC Guardrails:
Implement policy-as-code for Terraform/Helm/manifests; codify baselines, waivers, and approvals in version control.
Kubernetes Security:
Enforce admission controls; implement least-privilege RBAC, network policies, image signing/attestations, and runtime defenses.
Secrets & Identity:
Harden secrets management; align to Zero Trust and least-privilege access patterns.
Compliance Mapping:
Align detections/controls to PCI-DSS where applicable; produce audit-ready artifacts (e.g., SBOMs and attestations).
API & Bot Security (Desired):
Implement API discovery/cataloging and API threat modeling; enforce WAAP/edge/CDN policies and rate limiting; deploy bot detection/mitigation and fraud signals.

B) Observability, Runtime Protection & Threat Hunting

Runtime Monitoring:
Deploy vulnerability, misconfiguration, drift, and anomaly detection across clusters and services.
Telemetry & Dashboards:
Build real-time observability using Grafana, OpenTelemetry, and OpenSearch (or equivalent).
Threat Hunting:

Conduct proactive threat hunts across cloud, Kubernetes, and application environments using logs, metrics, and security telemetry.
Develop and refine detection logic, playbooks, and hypotheses based on TTPs, threat intel, and incident learnings.
Collaborate with SOC/IR to tune alerts, reduce noise, and continuously improve detection coverage.

IR Enablement:
Partner with SOC/IR for evidence collection, triage, post-incident reviews, and improvement actions.

C) Delivery, Documentation & Stakeholders

Execution:
Own Jira epics/stories; deliver against roadmap with measurable outcomes.
Docs & Runbooks:
Maintain Confluence runbooks, playbooks, standards, and architecture diagrams.
Communication:
Provide weekly status, risk/issue tracking, and stakeholder updates (customer + internal).

Qualifications

Bachelors in Computer Science, Cybersecurity, or related field; advanced degree a plus.
Hands-on DevSecOps experience across CI/CD, Kubernetes, and cloud-native platforms.
Strong IaC security and policy-as-code (Terraform/Helm/Git-based guardrails).
Kubernetes security (admission controls, image signing/attestations, RBAC, Pod Security admission, network policies).
Observability experience with tools such as Grafana, OpenTelemetry, OpenSearch (or similar stacks).
Experience with CNAPP/CSPM platforms (e.g., Prisma Cloud/Cortex Cloud and/or Wiz).
Threat Hunting & Detection Engineering:

Proven experience in proactive threat hunting in cloud-native and Kubernetes environments.
Ability to build, tune, and maintain detections and playbooks across logging/monitoring platforms and security tools.

API & Bot Security (Desired):
API discovery/cataloging; API threat modeling; WAAP/edge/CDN policies; rate limiting; bot detection/mitigation & fraud signals. Experience with Akamai/Cequence is a plus.
Strong troubleshooting, stakeholder communication, and cross-team collaboration skills.

More Jobs at Capgemini

Data Scientist (Python, GenAI)

Pune, Mumbai, Bengaluru

6 - 9 yrs

INR 12 - 16 Lacs

Blue Prism Rpa Developer

Chennai, Pune, Mumbai (All Areas)

3 - 8 yrs

INR 5 - 15 Lacs

Java + Automation Architect

Navi Mumbai

11 - 15 yrs

INR 15 - 22 Lacs

VMware Admin

Pune

6 - 10 yrs

INR 4 - 8 Lacs

PYSPARK DEVELOPER

Pune

4 - 9 yrs

INR 4 - 7 Lacs

Mock Interview

Practice Video Interview with JobPe AI

Start Job-Specific Interview

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.