Browse Jobs
Explore open roles across India.Explore active software roles. Sign up to apply and get AI match scores.
Top MatchesTop Job Matches
Loading jobs…
Back to Browse Jobs
Quantanite
Devsecops Engineer
Quantanite
Thane•On-site•1-3 Yrs•2 hours ago
Job description
Overview
Role Overview: As a DevSecOps Engineer specializing in Cloud & AI Security at Quantanite, you will be responsible for ensuring the security implementation across the company's application and cloud infrastructure estate.
Responsibilities
- As a DevSecOps Engineer specializing in Cloud & AI Security at Quantanite, you will be responsible for ensuring the security implementation across the company's application and cloud infrastructure estate. This hands-on role requires expertise in application-layer security controls, Azure cloud hardening, and AI security practices to deliver robust security measures throughout the development lifecycle and infrastructure design.
- Embed security controls throughout the software development lifecycle (SDLC) by conducting design reviews, threat modeling, code scanning, testing, and post-deployment monitoring.
- Implement and manage SAST, DAST, and SCA tooling within CI/CD pipelines to ensure secure coding practices.
- Define and enforce secure coding standards and conduct security-focused code reviews.
- Manage secrets, certificates, and key rotation practices along with authentication and authorization frameworks.
- Own vulnerability assessment and remediation processes across application components.
- Implement Web Application Firewall rules, API security gateways, and input validation controls.
- Define and implement security controls specific to AI/ML systems including data security, data governance controls, and risk mitigation strategies.
- Collaborate with AI/ML engineers to ensure security-first design principles are applied in RAG pipelines, vector databases, and agentic workflows.
- Stay updated with evolving AI security standards and frameworks and translate them into actionable controls.
- Design and implement a secure Azure landing zone, manage Azure Security Centre, harden Azure PaaS services, and maintain Azure Key Vault for secrets management.
- Embed security controls throughout the software development lifecycle (SDLC) by conducting design reviews, threat modeling, code scanning, testing, and post-deployment monitoring.
- Implement and manage SAST, DAST, and SCA tooling within CI/CD pipelines to ensure secure coding practices.
- Define and enforce secure coding standards and conduct security-focused code reviews.
- Manage secrets, certificates, and key rotation practices along with authentication and authorization frameworks.
- Own vulnerability assessment and remediation processes across application components.
- Implement Web Application Firewall rules, API security gateways, and input validation controls.
- Define and implement security controls specific to AI/ML systems including data security, data governance controls, and risk mitigation strategies.
- Collaborate with AI/ML engineers to ensure security-first design principles are applied in RAG pipelines, vector databases, and agentic workflows.
- Stay updated with evolving AI security standards and frameworks and translate them into actionable controls.
- Design and implement a secure Azure landing zone, manage Azure Security Centre, harden Azure PaaS services, and maintain Azure Key Vault for secrets management.
Qualifications
- Strong experience in application-layer security controls, Azure cloud hardening, and AI security practices.
- Hands-on experience with SAST, DAST, and SCA tooling within CI/CD pipelines.
- Expertise in defining and enforcing secure coding standards and conducting security code reviews.
- Proficiency in managing secrets, certificates, and key rotation practices.
- Knowledge of authentication and authorization frameworks such as OAuth 2.0, OIDC, RBAC.
- Familiarity with security controls specific to AI/ML systems and data security practices.
- Understanding of Azure cloud infrastructure security including VNet architecture, NSGs, Azure Firewall, and Azure Key Vault.
- Strong experience in application-layer security controls, Azure cloud hardening, and AI security practices.
- Hands-on experience with SAST, DAST, and SCA tooling within CI/CD pipelines.
- Expertise in defining and enforcing secure coding standards and conducting security code reviews.
- Proficiency in managing secrets, certificates, and key rotation practices.
- Knowledge of authentication and authorization frameworks such as OAuth 2.0, OIDC, RBAC.
- Familiarity with security controls specific