DevSecOps Engineer

HCLTech is a global technology company, home to more than 227,000 people across 60 countries, delivering industry-leading capabilities centered around AI, digital, engineering, cloud and software, powered by a broad portfolio of technology services and products.

We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology & Services, Semiconductor, Telecom and Media, Retail and CPG, Mobility and Public Services. Consolidated revenues as of 12 months ending March 2026 totaled $14.7B

Description:

We are looking for an experienced Senior DevSecOps Engineer to join our AppSec Platform team. Our team builds internal tools, automations, templates, and security capabilities that simplify and strengthen secure development practices across the organization.

This role is ideal for someone who combines strong DevSecOps and platform engineering capabilities with experience in agile ways of working and Scrum facilitation. You will play a key role both technically and operationally — helping the team drive secure automation initiatives while also supporting efficient collaboration and agile delivery practices.

You will work closely with developers, architects, security specialists, and stakeholders to integrate security into development workflows and continuously improve our AppSec platform capabilities.

What You Will Do:

DevSecOps & Platform Engineering (Primary Focus)

• Design, build, and maintain security automations, scripts, templates, and internal tooling

• Improve and secure CI/CD pipelines with a security-first mindset

• Implement and support DevSecOps practices such as SAST, DAST, secrets management, container security, and vulnerability management

• Integrate security controls and compliance checks into development workflows and platform services

• Support infrastructure-as-code and cloud security initiatives

• Collaborate with development teams to improve secure software delivery practices

• Help define technical standards, documentation, runbooks, and implementation guides

• Contribute to continuous improvement of the AppSec Platform team's tooling and processes

Agile & Scrum Responsibilities

In addition to your technical responsibilities, you will help strengthen and support the team’s agile ways of working by:

• Facilitating Scrum ceremonies such as sprint planning, daily stand-ups, sprint reviews, and retrospectives

• Supporting PI Planning activities for the AppSec Platform team

• Helping remove blockers and improve team collaboration and delivery flow

• Coaching and supporting the team in agile principles and continuous improvement

• Working with stakeholders and leadership to align priorities and delivery expectations

• Supporting a healthy team culture built on transparency, collaboration, and psychological safety

Future Opportunities: Digital Product Owner Path

We see this role as having strong long-term growth potential. Over time, and depending on your interests, strengths, and the evolution of the team, this position may naturally develop into a Digital Product Owner role within the AppSec domain.

This could include increased ownership of product strategy, roadmap planning, stakeholder engagement, and backlog prioritization for one of the AppSec department’s platforms or services.

Additional future opportunities may also include:

• Technical leadership within DevSecOps and AppSec Platform engineering

• Platform or service ownership responsibilities

• Increased strategic influence across secure development and platform initiatives

What We’re Looking For

Must-Have: DevSecOps / Technical Experience

• Proven experience working within DevSecOps, Platform Engineering, Cloud Engineering, or Application Security

• Experience with CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps

• Experience with scripting or automation using Python, Bash, PowerShell, or similar

• Understanding of secure software development lifecycle (SSDLC/SDLC) practices

• Knowledge of application security concepts such as OWASP, SAST, DAST, secrets management, and vulnerability management

• Experience working with cloud platforms such as AWS, Azure, or GCP

• Familiarity with infrastructure-as-code and automation practices

• Strong collaboration and communication skills

Important Complementary Experience: Scrum Master / Agile

• Experience working as a Scrum Master, Agile Coach, or Agile Team Facilitator

• Good understanding of Scrum methodology and agile delivery practices

• Experience facilitating agile ceremonies and supporting team delivery processes

• Ability to coach teams and stakeholders in agile principles and continuous improvement

• Experience working with tools such as Azure DevOps, Jira, Mural, or similar

Nice-to-Have

• Scrum Master certification (CSM, PSM, or equivalent)

• Experience with platform engineering or internal developer platforms

• Experience with security tooling and compliance automation

• Familiarity with Kubernetes, containers, and cloud-native technologies

• Experience from larger enterprise environments

Why Join Us?

• Be part of building and evolving the organization’s AppSec platform capabilities

• Work with modern DevSecOps and cloud technologies in a security-focused environment

• Opportunity to influence both technical direction and team ways of working

• A collaborative culture focused on learning, innovation, and continuous improvement

• Flexibility to shape your growth path based on your strengths and ambitions

• Supportive leadership committed to professional development and empowerment.

Please note that we will contact only those candidates who are selected for further consideration.