Semtech Logo

Semtech

Sr. Staff Engineer DevSecOps

Job Posted 12 Hours Ago Posted 12 Hours Ago
Be an Early Applicant
Pune, Mahārāshtra
Senior level
Pune, Mahārāshtra
Senior level
The Sr. Staff Engineer DevSecOps is responsible for implementing security within the software development lifecycle, collaborating on security goals, managing security tools, maintaining incident response plans, and ensuring continuous security monitoring. The role encourages professional development within the team and requires extensive experience in cloud environments and DevSecOps practices.
The summary above was generated by AI

Responsibilities:

DevSecOps Strategy:

  • Implement the Semtech DevSecOps strategy to integrate security seamlessly into the software development lifecycle.

  • Collaborate with cross-functional teams to establish and maintain secure coding standards, continuous integration, and continuous delivery pipelines.

DevSecOps Planning:

  • Establish clear project security goals and objectives, defining and prioritizing security requirements to align with organizational objectives.

  • Identify and assess potential security risks and threats, developing a comprehensive threat model for the application.

  • Set up a robust security governance structure within the project, implementing a security architecture plan and documenting all aspects of the planning process for future reference.

Security Automation:

  • Evaluate, implement, and manage security tools and technologies within the DevOps toolchain to automate security testing, vulnerability scanning, and compliance checks.

  • Ensure the tools are effectively utilized to identify and remediate security vulnerabilities early in the development process.

  • Drive the automation of security controls and processes to enhance efficiency and reduce manual intervention.

  • Implement automated security testing, code analysis, and deployment validation to maintain a high level of security without impeding development velocity.

  • Develop and maintain automated security processes for infrastructure as code (IaC) deployments.

Operations & Monitor:

  • Maintain an incident response plan specific to DevOps processes, ensuring rapid identification, containment, eradication, and recovery from security incidents.

  • Collaborate with incident response teams to integrate DevOps-related incidents into the overall organizational response plan.

  • Implement security monitoring and adhere to incident response procedures to detect and respond swiftly to security incidents.

  • Set up automated log and event monitoring, continuously updating and patching all components across production, pre-production, and development environments to minimize vulnerabilities.

  • Monitor all environments (Prod, Pre-Prod, Dev) for security events.

  • Review and update access controls, permissions, and security policies regularly, documenting all monitoring practices for reference and improvement.

  • Working closely with DevOps to update and patch all components in all environments to address known vulnerabilities and enhance overall security

Continuous Learning:

  • Stay current with industry trends, emerging threats, and security technologies.

  • Implement a culture of continuous learning within the team, encouraging certifications, training, and knowledge sharing.

Minimum Qualifications:

  • Bachelor's degree in computer science, information technology, or a related field (master's degree preferred).

  • Extensive experience in cloud architecture and strategy with a proven track record of successful cloud adoption.

  • Proven experience as a DevSecOps Engineer in AWS cloud environments.

  • Strong understanding of cloud security principles and best practices.

  • Hands-on experience with security tools such as AWS Security Hub, WAF, and third-party security solutions.

  • Proficiency in scripting and automation languages (e.g., Python, Shell, PowerShell).

  • Experience with CI/CD tools and practices such as GitHub actions, Chef, Anisble, Salt, Puppet,etc.

  • Knowledge of containerization and orchestration technologies (e.g., Docker, Kubernetes).

  • Certifications: AWS Certified Security – Specialty, Certified DevOps Engineer, or Certified Information Systems Security Professional (CISSP).

  • Strong analytical and problem-solving skills.

Similar Jobs

Yesterday
2 Locations
Mid level
Mid level
Fintech • Consulting
As a Software Engineer at Equifax, you will collaborate with other software developers, manage the codebase using Git, optimize system performance, implement monitoring tools, and contribute to DevOps practices. The role involves coding, managing infrastructure, and ensuring application uptime through effective tools and processes.
7 Days Ago
Hybrid
Warsha, Dhule, Mahārāshtra, IND
Senior level
Senior level
Productivity • Software
The Database Reliability Engineer will ensure the reliability and performance of the database environments, build automation for complex scenarios, support developers with feature design and data migration, and develop change management solutions. The role involves scripting for self-management of databases and overseeing critical modifications in a fast-paced environment.
7 Days Ago
Hybrid
Warsha, Dhule, Mahārāshtra, IND
Senior level
Senior level
Productivity • Software
As an Engineering Tech Lead, you will influence the architecture of products, evolve engineering practices, and oversee the development of new infrastructure features in collaboration with a talented team. Your role involves ownership of the product lifecycle in a CI/CD environment using cutting-edge technologies.

What you need to know about the Hyderabad Tech Scene

Because of its proximity to leading research institutions and a government committed to the city's growth, Hyderabad's tech scene is booming. With plans to establish India's first "AI city," the city is on track to become one of the world's most anticipated tech hubs, with companies like TransUnion, Schrödinger and Freshworks, among others, already calling the city home.
By clicking Apply you agree to share your profile information with the hiring company.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account