DevSecOps & Application Security Engineer
globalthoughtfocus7+ yrsKochiOn-siteDirect career pageEst. 18–30 LPA
Posted on 1 Sept
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Reach people at globalthoughtfocus
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at globalthoughtfocus you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Design, develop, and review Terraform IaC with a security-first approach across AWS and Microsoft Azure environments.
- Implement and enforce technical security controls throughout secure SDLC including policy-as-code at PR, pipeline, deploy, and runtime stages.
- Drive supply-chain security initiatives (signed builds, SBOM, SLSA provenance) and deploy/support Veracode, GitHub Advanced Security, CyberArk PAM, and PKI systems.
Minimum Requirements
- 7+ years in cybersecurity operations/engineering, cloud security, or DevSecOps.
- Strong hands-on experience with Terraform coding and IaC security code reviews.
- Deep knowledge of AWS and Microsoft security architectures with application security and DevSecOps toolchain integration experience.
- Experience setting up Veracode and/or GitHub Advanced Security and deploying CyberArk PAM and PKI systems.
Ideal Candidate Profile
- Experienced security architect focused on cloud-native secure SDLC with cross-cloud (AWS and Azure) expertise.
- Proven track record in implementing policy-as-code enforcement and supply-chain security controls in regulated environments like BFSI.
- Demonstrated ability to operationalize complex security automation tools (Veracode, CyberArk) and contribute to compliance and governance processes.