H
Senior DevSecOps Engineer
Harris
Contract type
Ongoing
Work mode
Remote
Experience
Senior · 7+ years
Job description
A Senior DevSecOps Engineer role focused on building security into ClearDATA's software delivery, securing CI/CD pipelines and infrastructure-as-code in partnership with R&D. The position is remote, based in Mumbai, with IST evening shift timings.
At a glance
- Work mode
- Remote
What you'll do
- Partner with R&D to design and maintain secure CI/CD pipelines, from code commit through deployment
- Integrate static and dynamic application security testing (SAST/DAST), dependency and container scanning, and secrets management into the development lifecycle
- Harden build systems, artifact repositories, and deployment tooling against common attack paths
- Own infrastructure-as-code security: reviewing and improving how Terraform, Kubernetes, and cloud configurations are written and deployed
- Act as the security point of contact for engineering teams, helping them fix issues without slowing them down unnecessarily
- Review new tools, services, and architecture decisions for security implications before they ship
- Build automation and guardrails so secure practices are the path of least resistance for developers
- Work with the IT/ITSec Manager and Senior Compliance Analyst to keep pipeline and infrastructure changes aligned with compliance obligations
- Support incident response for anything touching build, deployment, or production infrastructure
- Help set and maintain security standards for the software development lifecycle
What we're looking for
- 7-8 years in DevOps, platform engineering, or security engineering, with real hands-on pipeline and infrastructure experience
- Direct experience securing CI/CD pipelines and build systems, not just running them
- Strong background with cloud infrastructure (AWS, Azure, or GCP) and infrastructure-as-code (Terraform or similar)
- Comfortable with containers and orchestration (Docker, Kubernetes)
- Experience with SAST/DAST tools, dependency scanning, and secrets management
- Able to work directly with engineers day to day and explain security tradeoffs in terms that land
- Excellent communication skills (written & verbal)
- Working independently
- Critical thinking
Nice to have
- Familiarity with HIPAA, SOC 2, HITRUST, or GDPR, especially in healthcare or another regulated industry
- Experience in a healthcare, fintech, or other regulated environment where security and compliance carry real weight
- Relevant certifications such as AWS/Azure/GCP security specialties, CKS, or similar
- A background writing your own tooling or automation rather than just configuring off-the-shelf products
Your team
R&D organization
Works closely with the R&D organization; also collaborates with the IT/ITSec Manager and Senior Compliance Analyst
Benefits
- Annual Public Holidays as applicable
- 30 days total leave per calendar year
- Mediclaim policy
- Lifestyle Rewards Program
- Group Term Life Insurance
- Gratuity