About Oolka

We're building India's first truly Agentic AI credit management product that helps users improve and maintain healthy credit scores
Founded by Utkrishta Kumar (ex-CBO, Meesho)
We are backed global top VCs: Lightspeed and Z47 (fka Matrix Partners) along with very very successful angel investors

The Role

We're seeking a top-tier Dev-Ops Engineer to accelerate our speed of deployments for the engineering team and create headroom for 100x traffic in the coming year.

Location: Work-from-office, Bangalore

Responsibilities:

Integrate Security: Embed security testing, reviews, and best practices into all phases of the development lifecycle
Automate Security Processes: Design, implement, and maintain security automation tools (e.g., SAST, DAST, SCA, secrets scanning) within the CI/CD pipelines to detect vulnerabilities early and efficiently.
Conduct Assessments and Testing: Perform regular vulnerability assessments, threat modeling, and penetration testing on applications and infrastructure to identify and mitigate risks.
Manage Infrastructure as Code (IaC) Security: Ensure secure configuration and management of cloud and on-premise infrastructure using IaC tools like Terraform, or CloudFormation.
Monitor and Respond to Incidents: Set up and manage security monitoring and observability solutions (e.g., SIEM, ELK stack, Grafana) to detect and respond to security incidents in real-time.
Ensure Compliance: Work with compliance teams to implement and enforce security policies and regulatory standards (e.g., GDPR, HIPAA, PCI-DSS, SOC 2).
Collaborate and Educate: Foster a security-aware culture by collaborating with cross-functional teams and providing guidance and training on secure coding practices and emerging threats.

Required:

Experience: 4+ years of experience in DevOps (Sec-Ops is a bonus)
Technical Proficiency:
- CI/CD Tools: Jenkins, GitLab CI, GitHub Actions.
- Cloud Platforms: Deep understanding of security on AWS.
- Scripting/Programming: Proficiency in languages like Python, Bash, Shell, or Go for automation and custom tool development.
- IaC and Containerization: Experience with Docker, Kubernetes, and Terraform.
- Security Tools: Familiarity with vulnerability scanning, static/dynamic analysis, and secrets management tools (e.g., SonarQube, Snyk, HashiCorp Vault, OWASP ZAP).
- Experience with AI/ML-based security tools for threat detection and risk forecasting.

Soft Skills: Strong problem-solving, communication, collaboration, and analytical skills are essential for success in this cross-functional role.

Selection Process

Technical Assessment: Distributed systems focused technical discussion (60 minutes)
System Design: Infra Design and performance at scale conversation (60 minutes)
Final Round: Cultural alignment and team interaction

What we offer

Work directly with experienced founders and senior engineers
Shape product direction of a post-PMF journey
Complete ownership of features from conception to deployment
Learning opportunities across the full stack
In addition to cash, we offer ESOPs and healthcare insurance