DevSecOps Security Engineer

Sincera, now part of Virtusa, is seeking an experienced DevSecOps Security Engineer to build and operate automated security controls within delivery pipelines. This role focuses on CI/CD security, container and Kubernetes hardening, vulnerability remediation, policy-as-code implementation, security evidence generation, and close collaboration with platform and application teams.

Key Responsibilities

• Implement and maintain automated security controls in CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and infrastructure-as-code (IaC) scanning.
• Enforce security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX) to prevent vulnerable or unverified deployments.
• Drive container vulnerability remediation and hardening using hardened minimal base images.
• Implement Kubernetes security controls including pod security standards, network policies, RBAC, admission controls, and SCCs.
• Secure workloads through secrets management (HashiCorp Vault), mutual TLS (mTLS), service mesh policies, and Linux/container hardening.
• Build and maintain policy-as-code guardrails using OPA/Rego or Kyverno.
• Partner with platform teams to triage vulnerabilities and support incident response.