Senior DevSecOps Engineer

Senior Dev Sec Ops  Engineer

We are seeking a highly skilled and security-focused Senior Dev Sec Ops  Engineer to join the Akrites OSS Security Engineering team. This role is responsible for securing the open-source software ecosystem by analyzing, validating, and remediating vulnerabilities identified across critical OSS components and services.

The engineer will work at the intersection of software engineering, security engineering, and cloud operations to strengthen software supply chain security and improve the security posture of open-source technologies.

The ideal candidate possesses strong expertise in Java, Python, Dev Sec Ops  practices, vulnerability management, automation engineering, and cloud-native platforms, with a passion for driving secure development and operational excellence.

This position will collaborate closely with client security engineering teams, open-source maintainers, and cross-functional product engineering groups to deliver scalable security solutions and sustainable remediation strategies.

Key responsibilities include:

• OSS Vulnerability Analysis and Remediation
• Analyze, triage, validate, and prioritize Open Source Software (OSS) vulnerabilities identified through security scanning platforms, Software Composition Analysis (SCA) tools, and vulnerability intelligence feeds.
• Perform technical investigations to determine exploitability, business impact, attack vectors, and remediation requirements.
• Develop and implement vulnerability fixes across OSS components using Java and Python, ensuring secure coding practices and compliance with security standards.
• Conduct root cause analysis for recurring vulnerabilities and recommend long-term mitigation strategies.
• Validate remediation effectiveness through code reviews, testing, proof-of-concept verification, and security assessment techniques.
• Secure Software Supply Chain Engineering
• Strengthen software supply chain security through dependency management, secure package validation, and vulnerability governance practices.
• Partner with engineering teams to evaluate and remediate risks associated with third-party libraries, frameworks, and open-source dependencies.
• Support coordinated vulnerability disclosure and remediation workflows while maintaining confidentiality and security compliance.
• Contribute to vulnerability response activities from intake and validation through patch development, testing, and coordinated release processes.
• Dev Sec Ops  Platform Engineering
• Design, implement, and optimize Dev Sec Ops  workflows within the Akrites platform deployed on Google Cloud Platform (GCP). Integrate security controls into CI/CD pipelines, enabling automated vulnerability detection, policy enforcement, and remediation tracking.
• Enhance platform reliability, observability, and security through automation, infrastructure monitoring, logging, and operational analytics.
• Collaborate with development teams to embed security practices throughout the Software Development Lifecycle (SDLC).
• Essential
  
  Skills:
  
  Digital:
  Terraform;
  CodeQL;
  Git Hub Advanced Security;
  Digital:
  Cloud Security;
  Security Engineering

Company benefits and culture:

• Inclusive and diverse work environment

• Opportunities for professional growth and development

• Comprehensive health and wellness benefits