DevSecOps Engineer

NextLabs®, Inc. provides zero trust data-centric security software to protect business critical data and applications. Our patented dynamic authorization technology and industry leading attribute-based zero trust policy platform helps enterprises identify and protect sensitive data, monitor and control access to the data, and prevent regulatory violations – whether in the cloud or on premises. The software automates enforcement of security controls and compliance policies to prevent unauthorized access and data breach. NextLabs’ policy management platform and universal enforcement solutions enable centrally managed information control policy across all applications, data, and digital business processes. NextLabs has some of the largest global enterprises as customers and has strategic relationships with industry leaders such as SAP, Siemens, Microsoft, AWS, Accenture, Deloitte, Infosys, and IBM.

We are looking for a DevSecOps Engineer with a strong focus on the Governance, Risk, and Compliance (GRC) domain.

You will be part of our growing DevSecOps team, responsible for implementing, maintaining, and improving our security posture across environments.

Responsibilities

· Support the implementation and operationalization of GRC frameworks (e.g., NIST, ISO 27001, SOC 2).

· Work with cross-functional teams to ensure security controls and policies are effectively enforced.

· Manage vulnerability scanning, SIEM systems, and incident response processes.

· Assist in audit preparation and response activities.

· Maintain compliance documentation and risk registers.

· Develop automation scripts/tools to streamline SecOps processes.

Requirements

· 2–5 years of experience in a SecOps or related security role.

· Experience with GRC tools (e.g., ServiceNow GRC, RSA Archer) and security standards (ISO 27001, SOC 2, NIST).

· Hands-on knowledge of CI/CD pipelines and integrating security tools.

· Experience with cloud platforms (AWS, Azure, or GCP) and securing cloud environments.

· Strong scripting skills (Python, Bash, etc.) preferred.

· Excellent communication and documentation skills.

Preferred Qualifications

· Relevant certifications (e.g., CISSP, CISA, CRISC, or ISO 27001 Lead Implementer).

Interested candidates may send resume to [email protected] or use our online form.