Create a free account
One signup unlocks everything for this job:
- Apply to this job and track your application
- See your personalized profile match score
- Generate an AI cover letter for this role
Chennai · On-site · 7-10 Yrs · 20 hours ago
Business consulting · 10000+ Employees · Montreal, Canada
CGI is one of the largest IT and business consulting firms in the world with over 90,000 members worldwide. Since 1976, we’re here to last and lead. We create meaningful change across the U.S., using technology as a force for good to enable governments and iconic brands to create equitable and accessible solutions to business challenges. At CGI, you can build the career you want and try new things. Here, you’ll work with people who are invested in your success. When we ask people what they love about working at CGI, we always get the same answer: "It's the people." People create true connections here because we encourage you to be you at work. What makes you unique is what creates the diversity that allows us to best serve our clients and thrive as a community. Join our talent network to learn more about Life at CGI: https://hubs.ly/Q01p2nTX0
Hiring: Engineering
What employees say
+ Has good work life balance with Hybrid option, Transport facility
− Felt very less Compensation for freshers
More reviews on the company profile.
Interview experience · AI Apprentice
The process mainly included an initial screening followed by technical and HR discussions. The technical round focused on basics of Python, SQL, AI/ML concepts, projects mentioned on the resume, and some problem-solving
Difficult difficulty · Chennai · 1,208 reports
More interview insightsJob description
Overview
Position Description:
Responsibilities
- Senior software engineer
- Engineering Graduate/MCA or equivalent
- Strong experience building managing securing and maintaining Docker images and containers.
- Hands-on experience with image vulnerability scanning remediation hardening and security compliance.
- Knowledge of CVEs CVSS scoring vulnerability prioritization patching and remediation processes.
- Experience with secure base images minimal image footprints non-root execution secrets management and least-privilege principles.
- Experience integrating security scanning and compliance gates into automated build and deployment pipelines.
- Familiarity with Docker Hub Harbor Amazon ECR Azure Container Registry or similar image repositories.
- Strong understanding of Linux operating systems package management permissions and system security.
- Experience with Shell/Bash Python or similar scripting languages.
- Understanding of container security access control secure configuration and software supply chain security.
- Strong analytical skills to investigate security findings resolve image build issues and support production readiness.
Qualifications
- Category: Full Time
- Shift: General
- Main location: Chennai
- Position ID: J1026-0489
- Employment Type: Full time
- to be successful in this role:
- Docker and Containerization: Strong experience building managing securing and maintaining Docker images and containers.
- Docker Image Security: Hands-on experience with image vulnerability scanning remediation hardening and security compliance.
- Vulnerability Management: Knowledge of CVEs CVSS scoring vulnerability prioritization patching and remediation processes.
- Container Image Hardening: Experience with secure base images minimal image footprints non-root execution secrets management and least-privilege principles.
- CI/CD Pipelines: Experience integrating security scanning and compliance gates into automated build and deployment pipelines.
- Container Registries: Familiarity with Docker Hub Harbor Amazon ECR Azure Container Registry or similar image repositories.
- Linux Administration: Strong understanding of Linux operating systems package management permissions and system security.
- Scripting and Automation: Experience with Shell/Bash Python or similar scripting languages.
- Security Best Practices: Understanding of container security access control secure configuration and software supply chain security.
- Troubleshooting: Strong analytical skills to investigate security findings resolve image build issues and support production readiness.
- Good-to-Have Skills:
- Knowledge of Kubernetes security container orchestration and workload protection.
- Familiarity with Software Bill of Materials (SBOM) SPDX CycloneDX and software supply chain security.
- Knowledge of DevSecOps frameworks and security standards such as CIS Docker Benchmarks NIST guidance and OWASP practices.
- Familiarity with Jenkins GitLab CI/CD GitHub Actions Azure DevOps or similar automation platforms.
- Knowledge of cloud security across AWS Microsoft Azure or Google Cloud.
- Familiarity with Open Policy Agent (OPA) Kyverno or other policy-as-code solutions.
- .NET
- Communication
- Docker
- English
- Java
- Python
Education
- Manage the security lifecycle of Docker images including creation scanning validation maintenance and deployment readiness.
- Ensure the production readiness maintainability and security compliance of functional technical and editor Docker images.
- Analyze vulnerability reports assess risks prioritize remediation and coordinate corrective actions with development and platform teams.
- Build harden optimize and maintain secure Docker images by following container security best practices.
- Implement and maintain security controls within CI/CD pipelines to automate image scanning and compliance checks.
- Manage Docker image repositories and registries including access controls image tagging versioning and lifecycle management.
- Ensure compliance with organizational security policies industry standards and applicable regulatory requirements.
- Implement image signing provenance verification and software supply chain security controls where applicable.
- Collaborate with development DevOps infrastructure and cybersecurity teams to resolve container security issues.
- Automate security checks image validation and remediation workflows using scripting and DevSecOps tools.
- Maintain technical documentation security assessment reports remediation records and compliance evidence.
- Support production deployments incident investigations root cause analysis and continuous improvement of container security practices.
Verify Software Engineer for this role
Free PRACTICE for Software Engineer adds a verified skill signal that can boost how roles like this rank for you — optional, not required to browse or apply.
Sign up — verify Software Engineer free →Want match scores and deeper insight? Create a free candidate profile
Job application FAQ
Last updated 11 October 2026
- How do I apply for DevSecOps Engineer 7 to 9 years of experience at CGI?
- Open this job on Feedback AI and sign up free (or sign in). You can apply from the job detail page; match scores and skill gaps appear when your profile is complete. CGI may attach structured assessments to interview rounds after you apply.
- Does Feedback AI show a match score for this DevSecOps Engineer 7 to 9 years of experience role?
- Yes after you add a resume or skills. Match score ranks this role against your profile — skills met, gaps, level, and location — so you prioritise applications where fit is strongest.
- Is DevSecOps Engineer 7 to 9 years of experience remote or on-site in Chennai, Tamil Nadu (+1 other)?
- This listing is marked on_site with location Chennai, Tamil Nadu (+1 other). Confirm details on the job description before applying.
- What skills matter for this DevSecOps Engineer 7 to 9 years of experience role at CGI?
- This is a mid-level DevSecOps Engineer 7 to 9 years of experience role. Key skills include skills listed in the job description. Feedback AI highlights matched vs missing skills on your profile after signup.