Senior Cloud SecOps- Head Office, Gurugram

Job Summary:

We are looking for a candidate to lead end-to-end vulnerability management initiatives, implementing DevSecOps practices, and securing cloud-native applications. The role involves proactive engagement with clients and internal teams to strengthen security posture across applications, infrastructure, and CI/CD pipelines, ensuring alignment with organizational security policies and compliance standards.

Key Responsibilities:

• Lead vulnerability scanning, analysis, prioritization, and remediation efforts across diverse environments.
• Maintain oversight of the

  end-to-end vulnerability management process

  , ensuring timely resolution and continuous improvement.
• Monitor vulnerabilities (including analysis of CERT advisories) and propose effective remediation plans, considering business impact and technical exposure.
• Evaluate and secure client software development practices by integrating security controls into the

  SDLC

  and

  CI/CD pipelines

  (“shift-left” approach).
• Determine the real impact of vulnerabilities and ensure risk-based prioritization.
• Implement, enhance, and maintain

  DevSecOps

  practices across development and operations teams.
• Integrate, configure, and manage

  secure public cloud services

  (AWS, Azure, or GCP).
• Collaborate with the Cloud SecOps team to strengthen cloud-native application security.
• Create and maintain accurate project and technical documentation.
• Liaise with clients, stakeholders, and internal teams to align security strategies with business objectives.

Skills & Qualifications:

• Minimum 4 years

  of professional experience in cybersecurity, vulnerability management, or DevSecOps.
• Strong understanding of

  CVE analysis

  and ability to communicate vulnerabilities to both technical and non-technical audiences.
• Proficiency in

  Python

  and

  Shell scripting

  (experience in additional languages is a plus).
• Hands-on experience with

  Docker

  and

  Kubernetes

  .
• Practical experience with at least one major

  cloud platform

  (AWS, Azure, or GCP).
• Familiarity with

  vulnerability scanning tools

  such as

  Qualys

  ,

  Prisma Cloud

  , or equivalent.
• Working knowledge of

  DevSecOps tools

  such as

  SAST

  ,

  SCA

  ,

  Snyk

  , or

  Checkmarx

  .
• Experience in implementing

  secure SDLC

  and

  build processes.