Senior DevSecOps Engineer

S&P Global

. Define and implement baseline security policies and automated guardrails across source control and CI/CD environments .

Posted 11/2/2026full-timeHyderabad • IndiaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in DevSecOps practices, including the design and automation of CI/CD pipelines, security policy development, and governance of security tools within the developer toolchain. Proficient in AWS services and infrastructure as code, with strong capabilities in vulnerability management and collaboration across engineering teams.

Highest-signal resume keywords

DevSecOps ExperienceCI/CD Pipeline AutomationAWS Services ProficiencySecurity Policy DevelopmentScripting Skills in Python or Bash

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

DevSecOpsCI/CD PipelinesAWS EC2AWS IAMTerraformGitHub ActionsSASTSecrets ScanningInfrastructure as CodeConfiguration Management

Soft Skills

Strong Communication SkillsInfluencing Adoption

Tools & Technologies

SonarQubeGitHub Advanced SecurityCheckmarxWizJFrog ArtifactoryCloudFormationCDKGitHub Enterprise Cloud

Certifications & Qualifications

AWS CertificationsKubernetes CertificationsCSSLPSecurity+

Industry Keywords

Security GovernanceApplication SecurityVulnerability ManagementLeast PrivilegeAI Tool Governance

Tech Stack

Tools & technologies

AWSCloudEC2JavaScriptKubernetesNode.jsPythonTerraformTypeScript

About the role

Key responsibilities & impact

Define and implement baseline security policies and automated guardrails across source control and CI/CD environments
Integrate, manage and tune SonarQube, GitHub Advanced Security, Checkmarx and Wiz within developer workflows
Triage security findings, prioritise vulnerabilities by risk and track remediation against SLAs
Establish governance for credentials, secrets and non-human identities across the developer toolchain
Harden build infrastructure and software supply chain controls, including JFrog Artifactory/Xray
Provision, secure and optimise AWS services supporting the developer platform, including EC2, ECS/EKS, Lambda, S3, IAM and CloudFormation/CDK
Contribute to governance for AI-assisted development tools and developer endpoint security
Monitor sensitive configuration changes, implement alerting and support audit and compliance activities
Partner with platform and engineering teams to automate security controls and drive adoption
Collaborate with InfoSec, audit, engineering leaders, platform teams, divisional DevOps/TechOps teams and BISOs

Requirements

What you’ll need

5–8 years of experience in DevSecOps, application security or security governance
Strong experience designing and automating enterprise-scale CI/CD pipelines
Understanding of source control security and common pipeline threats
Hands-on knowledge of GitHub Enterprise Cloud, GitHub Actions, runners, rulesets and policies
Knowledge of repository lifecycle management and Git practices, including Conventional Commits, semantic versioning, trunk-based development/GitFlow and pull request workflows
Hands-on experience with SAST, SCA, secrets scanning or cloud security tools
Ability to write security policies and standards and translate them into technical enforcement
Knowledge of IAM, SSO, RBAC and least privilege
Proficiency with infrastructure as code, including Terraform, CloudFormation or CDK
Familiarity with configuration management tools
Experience with AWS compute, networking, storage, IAM and ECS/EKS, including AWS security practices
Strong scripting and automation skills in Python or Bash; familiarity with TypeScript/Node.js
Understanding of CMDBs and ITIL-aligned change management, including approvals and audit trails
Awareness of AI tool governance and developer endpoint security, including MDM
Strong communication skills and ability to influence adoption across engineering teams
Bachelor’s degree or higher in a technology-related field is preferred
Nice-to-have: experience with GitHub Copilot, Cursor IDE, developer agents/MCP integrations, Backstage plugins or IDP ecosystems, OPA/Sentinel, AWS or Kubernetes certifications, and security certifications such as CSSLP or Security+

Benefits

Comp & perks

Health care coverage designed for the mind and body
Generous time off
Continuous learning resources and career development
Training and certification support
Competitive pay
Retirement planning
Continuing education program
Company-matched student loan contribution
Financial wellness programs
Family benefits for partners and children
Retail discounts
Referral incentive awards