Description

Lead large-scale application security programs and integrate security into the DevOps lifecycle. You will own the release pipeline security, drive vulnerability remediation, and mentor junior engineers.

Responsibilities

• Execute shift-left security concepts and integrate security testing into DevOps and CI/CD pipelines.
• Develop automated solutions to mitigate risks and manage vulnerability analysis using SAST, DAST, SCA, IAST, and API security tools.
• Track, prioritize, and drive the remediation of code vulnerabilities across development teams.
• Partner with developers to train them on secure coding practices and ensure security testing is a seamless part of code development.
• Provide technical leadership and mentorship to junior team members during security engagements.

Required Skills

• Minimum 3 years of full-time experience in SAST, SCA, DAST, and DevSecOps.
• Strong proficiency in scripting and programming with Python, PowerShell, Java, or Perl.
• Experience building DevSecOps CI/CD pipelines using open source tools.
• Hands-on experience with SCM tools like GitHub, GitLab, or Bitbucket, including webhook and action integrations.
• Deep understanding of web-based application vulnerabilities and the OWASP Top 10.
• Experience implementing CI/CD phases including secret scanning, IaC, and compliance as code.
• Familiarity with dynamic scanning tools such as Acunetix, HP WebInspect, HCL AppScan, or BurpSuite.
• Familiarity with static analysis tools like Checkmarx, Snyk, Fortify, Veracode, Coverity, or IBM AppScan Source.
• Working knowledge of Windows, Linux, and UNIX operating systems.

Preferred Skills

• Familiarity with JavaScript and Angular.
• Experience performing security analysis specifically on APIs.

Key Skills

Education

BE/ B.Tech/ MCA