Senior DevSecOps Engineer

Company: Confidential

Why candidates should join This is a high-ownership role at the intersection of software, AI, and biopharma. The engineer will have direct influence on how security is designed into pipelines, infrastructure, and scientific data workflows, and on the resilience and trustworthiness of the Insilico Suite.

The company works with leading biopharmaceutical customers, so the role offers the chance to protect a platform that processes sensitive data while collaborating with software engineers, DevOps, data scientists, and bioprocess specialists.

Role Requirements

• Senior-level (Must-have)
• 6+ years in DevSecOps, security engineering, or DevOps/SRE with strong security focus (Must-have)
• CI/CD security tooling integration (SAST, DAST, SCA, secret scanning, IaC scanning) (Must-have)
• Cloud security on Azure, AWS, or GCP (Must-have)
• Containers and Kubernetes security (Must-have)
• Infrastructure as code with Terraform (Must-have)
• Policy-as-code with OPA/Rego (Must-have)
• Scripting and automation in Python, Bash, or Go (Must-have)
• Security monitoring with SIEM/SOAR and CSPM tools (Must-have)
• Secure SDLC and threat modeling (Must-have)
• Software supply chain security (Must-have)
• Strong ownership and hands-on mindset (Must-have)
• Clear communication and cross-functional collaboration (Must-have)
• Pragmatic, risk-based approach balancing security and delivery speed (Must-have)
• Experience with regulated environments such as GxP, GAMP 5, HIPAA, or GDPR (Nice-to-have)

About The Role Senior DevSecOps Engineer for a remote, full-time role focused on embedding security across the full software development and delivery lifecycle of the Insilico Suite. The role works closely with DevOps, backend, data, and infrastructure engineers to define and enforce security policies, guardrails, and automation that keep the SaaS platform and sensitive biopharmaceutical data secure, compliant, and resilient. Success in the role means owning the platform’s security posture, shifting security left, and building practical mechanisms for detection, response, and continuous compliance across cloud, containers, Kubernetes, and CI/CD pipelines.

Interview process

• Shortlisted/under Review
• 1st stage
• Task
• 2nd stage
• Final round
• Background Check
• Offer sent