Senior DevSecOps Engineer

About GoKwik

• Build secure CI/CD pipelines by embedding vulnerability scanning, SAST, and DAST, ensuring every release ships fast and safe
• Partner with engineering and security teams to design cloud-native architectures that are secure by default and resilient at scale
• Automate the boring stuff, from secrets management and IAM policy enforcement to compliance validation checks, cutting down human error and accelerating delivery
• Integrate best-in-class security tools (Vault, Prisma, Aqua, Trivy, etc.) into every layer of our infrastructure
• Take the lead during security incidents, coordinating response across teams and ensuring issues are remediated quickly and effectively
• Drive a proactive DevSecOps culture by running training, awareness programs, and blameless postmortems that turn incidents into learnings
• Own compliance readiness (SOC2, ISO 27001, PCI-DSS), working closely with governance and legal to keep us always audit-prepared without slowing down engineering

• 3 - 7 years of hands-on experience in DevSecOps or Cloud Security Engineering within fast-scaling SaaS or eCommerce environments
• Strong grasp of AppSec and Cloud Security fundamentals, from IAM, WAF, and KMS to CSPM best practices
• Practical experience with Kubernetes security (RBAC, PodSecurity, NetworkPolicies) and keeping clusters production-hardened
• Comfortable with threat modelling, incident response, and security compliance frameworks (ISO, SOC2, PCI-DSS)
• Solid coding/scripting skills (Python, Go, Bash, etc.) to automate controls and eliminate repetitive manual work
• Someone who doesn t just know the theory but has battle-tested experience in securing systems at scale

• You embed security into velocity, helping teams move fast without cutting corners
• You believe in a blameless, learning-first culture, where issues are fixed, not hidden
• You take uptime and compliance seriously, 99.99999% is the bar, and you love building guardrails that make it possible
• You stay proactive, spotting and solving risks before they become incidents
• You thrive in a high-trust environment, where ownership is real and security is an enabler, not a blocker