We’re Hiring SDE III – DevSecOps

SDE III – DevSecOpsSDE III – DevSecOpsAbout Junglee Games:Junglee Games is part of Flutter Entertainment, the world’s leading iGaming and sports entertainment group listed on the New York Stock Exchange (NYSE: FLUT).We operate independently in India while leveraging Flutter’s global expertise across product, technology, and responsible gaming.With over 150 million users, Junglee Games is a leader in the game-tech space. Founded in San Francisco in 2012, we are revolutionising how people play games. Our notable free-to-play titles include Howzat, Junglee Rummy, and Junglee Poker, built to deliver engaging, scalable, and trusted gaming experiences.Our team brings a deep global pedigree having worked on internationally acclaimed AAA titles such as Transformers and Star Wars: The Old Republic, and contributed to iconic Hollywood productions including Avatar. Junglee Games mission is to build entertainment for millions of players worldwide and connect them through games.Joining Junglee Games means working at the intersection of India’s fast-growing gaming ecosystem and Flutter Entertainment’s global talent community, helping shape the future of digital entertainment. Beyond gaming, Junglee Games represents a culture driven by innovation, data science, cutting-edge technology, and strong values, shaping the next generation of responsible leaders.Job Location: Gurgaon/ BangaloreAs our SDE III – DevSecOps, you will build and manage a secure cloud platform while ensuring seamless development, build and deployment capabilities. You will be responsible for the security assessment of infrastructure, database and applications, setting up processes and guidelines. You will work closely with DevOps, Architects and Developers and QA to build highly reliable and secure products on cloud.ResponsibilitiesParticipate in security reviews of new developments to ensure that released products comply with security requirements and industry best practice, Triage defects found and perform root cause analysisActively participate in compliance audits, vulnerability reviews and assessments. Undertake and support penetration testing and system reviews/auditsLead Policy and Procedure development for systems securityCoach the team to write secure code, and develop/implement secure systems and processesUnderstand the Amazon identity management ecosystem holistically and create a secure infrastructure, Enforce compliance with IAM principals including least privilege access, password management, Audit logging, RBAC, deploy and maintain password management, user account lifecycle, certificate management and system authentication solutionsEngage with stakeholders and interested parties to ensure compliance, security and operational/functional requirements are metCreate and implement automated processes that reduce manual efforts and increase overall efficiency and scalabilityDesign a secure application release automation process to make security an integral part of the CI/CD pipelines.Identify security tools and lead operationalization of solutions from POC to Productionimprove Web App Firewalls (WAF), Ensure early Identification of intrusion & attacks and implement countermeasuresImplement security measures that monitor and protect sensitive data and systems from infiltration and cyber-attacks.Work with cloud providers to obtain an understanding of security controls, ensure controls are leveragedMonitor security events of runtime environments, e.g. intrusion detection, API threat prevention, container runtime securityMonitor system logs, SIEM tools and network traffic for unusual or suspicious activityMaintain an understanding of the latest cybersecurity threats and implement best practices for protection.Act as a first-responder for security-related incidents.RequirementsOverall 5+ years of relevant experienceBachelor’s degree in Computer Science or a related technical discipline, or equivalent practical experience.Solid understanding of Amazon Web Services (AWS) including VPC, ELB, IAM, KMS, EC2, S3, CloudTrail, CloudFormation, CloudWatch, Cloud HSM, AWS Encryption SDK, RDS, ELB, AWS Route 53, CloudFront, SNSUnderstanding of security frameworks and standards like OWASP & NIST, Solid understanding of security protocols, cryptography, authentication, authorizationGood understanding of Linux and Windows OS, TCP/IP protocol stack and networking fundamentals, and security principles at all layers of the OSI stackExperience with API security, AWS cloud security, container security, network security, cryptography, PKI, certificate management,Experience in CI/CD Tools Including Git, Jenkins, Ansible, or similarKnowledge and experience in web application security testing, vulnerability assessment, penetration testing, and generating reports using tools like Burp Suite, Paros, AppScan, Wireshark, Nmap, and Nessus.Experience in designing cloud-native security architectures, applying defense in-depth strategiesAdvanced Expertise in at least one scripting language, Shell scripting, and AWS CLIExpert knowledge of container security (Docker/Kubernetes), Container security tools such as Twistlock and AquaticExperience with third-party cloud security toolsExperience with tooling and systems for a build, infrastructure automation, and monitoringExtensive experience in information security and risk management