Job ID 217 - Lead - Cloud Security & DevSecOps

energytec.ai, ECIL, Hyderabad +1

The role

We are looking for a Lead – Cloud Security & DevSecOps to own the security posture of our AWS cloud platform and CI/CD pipelines, while supporting, designing, and implementing scalable, secure, and reliable infrastructure and DevOps practices. You will lead vulnerability management, drive remediation of AWS Security Hub and Inspector findings, embed security into GitLab CI/CD, and leverage AI-driven insights for proactive monitoring and operational efficiency.

What you will do

Cloud security posture: Own and continuously improve the AWS security posture across accounts, VPCs, IAM, KMS, Secrets Manager, WAF, CloudTrail and Control Tower.
Vulnerability management and reporting: Be accountable for the end-to-end vulnerability management lifecycle: discovery, risk-based prioritisation, remediation, verification and reporting. Triage and drive closure of AWS Security Hub and Amazon Guard Duty findings (EC2, ECR, Lambda) against agreed SLAs, coordinating remediation with application and platform teams. Run security reviews covering remediation SLAs, exposure reduction and compliance metrics for leadership and audit readiness.
Governance, guardrails and compliance: Define, implement and monitor preventative guardrails, Service Control Policies (SCPs) and AWS Config conformance packs across all accounts, ensuring cloud infrastructure and pipelines align with CIS benchmarks and the NIST framework, and support audits. Own the security exception and risk-acceptance workflow, ensuring every suppression or unpatched finding has a documented business rationale, compensating controls and an expiry date.
DevSecOps pipelines: Integrate and maintain security checks in GitLab CI/CD, including SAST, DAST, SCA, secret detection, container image scanning and IaC scanning, with quality gates and policy-as-code (shift-left).
Container and workload hardening: Harden and secure workloads on ECS, EKS and RDS, covering hardened container image baselines (CIS), RBAC, network policies and end-to-end encryption.
Secure Infrastructure as Code and automation: Review and enforce secure Terraform practices, and automate security controls and routine operational tasks.
Threat detection and incident response: Build and operate AI-driven threat detection that triages alerts and raises actionable GitLab issues, and lead security incident response from containment through to root cause analysis and post-incident actions. Troubleshoot application and infrastructure issues across ECS, EKS, RDS, EC2, networking and CI/CD.
Leadership and standards: Mentor DevOps and systems engineers, define security standards and runbooks, conduct security reviews of new architectures and releases, and champion DevSecOps practices across the organisation.

Job ID 217 - Lead - Cloud Security & DevSecOps

The role

Job ID 217 - Lead - Cloud Security & DevSecOps

The role

What you will do

What you need

Nice to have

We don’t just build software; we build careers through our Employee Value Proposition (EVP)

Work Location: Hyderabad (ECIL X Roads)

About energytec.ai

Similar jobs at other companies

Staff Cloud Security Engineer

AWS Cloud Engineer

Senior DevOps Engineer

Security Engineer

Cloud Security Engineer

DevSecOps Lead

Interview questions

energytec.ai