Senior Cloud SecOps- Head Office, Gurugram

Job Description

Job Summary: We are looking for a candidate to lead end-to-end vulnerability management initiatives, implementing DevSecOps practices, and securing cloud-native applications. The role involves proactive engagement with clients and internal teams to strengthen security posture across applications, infrastructure, and CI/CD pipelines, ensuring alignment with organizational security policies and compliance standards. Key Responsibilities: Lead vulnerability scanning, analysis, prioritization, and remediation efforts across diverse environments. Maintain oversight of the end-to-end vulnerability management process , ensuring timely resolution and continuous improvement. Monitor vulnerabilities (including analysis of CERT advisories) and propose effective remediation plans, considering business impact and technical exposure. Evaluate and secure client software development practices by integrating security controls into the SDLC and CI/CD pipelines (?shift-left? approach). Determine the real impact of vulnerabilities and ensure risk-based prioritization. Implement, enhance, and maintain DevSecOps practices across development and operations teams. Integrate, configure, and manage secure public cloud services (AWS, Azure, or GCP). Collaborate with the Cloud SecOps team to strengthen cloud-native application security. Create and maintain accurate project and technical documentation. Liaise with clients, stakeholders, and internal teams to align security strategies with business objectives. Skills & Qualifications: Minimum 4 years of professional experience in cybersecurity, vulnerability management, or DevSecOps. Strong understanding of CVE analysis and ability to communicate vulnerabilities to both technical and non-technical audiences. Proficiency in Python and Shell scripting (experience in additional languages is a plus). Hands-on experience with Docker and Kubernetes . Practical experience with at least one major cloud platform (AWS, Azure, or GCP). Familiarity with vulnerability scanning tools such as Qualys , Prisma Cloud , or equivalent. Working knowledge of DevSecOps tools such as SAST , SCA , Snyk , or Checkmarx . Experience in implementing secure SDLC and build processes.