Designs and integrates application security controls into CI/CD pipelines and DevSecOps frameworks. Responsibilities include managing SAST, DAST, and SCA tools; triaging vulnerabilities; leading threat modeling; securing containers and Kubernetes workloads; governing vulnerability dashboards and secret vaults; hardening infrastructure as code; and investigating application-layer security incidents.
This is a remote position.
Application Security (AppSec) / DevSecOps Engineer
Job Details
- Employment Type: Contract
- Work Mode: Remote
- Location: Offshore
- Total Experience Required: 4 to 8 years
- Relevant Experience Required: 3+ years of dedicated experience securing software development lifecycles (SDLC) and engineering DevSecOps pipelines
- Mandatory Certification: Certified Application Security Engineer (CASE), Certified DevSecOps Professional (CDP), CSSLP, or CEH
Job Summary
We are seeking an experienced Application Security / DevSecOps Engineer to bake robust safety controls directly into our automated software delivery frameworks. The ideal candidate will bridge software engineering with security operations, implementing automated code testing gates, leading threat modeling workshops, and hardening application containers to identify and mitigate software vulnerabilities before code hits production.
Key Responsibilities
- Design and integrate automated security testing gates directly into modern CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins).
- Configure and manage application scanning frameworks, orchestrating Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) tooling.
- Triage and remediate software vulnerabilities, analyzing code flaws, open-source dependency risks, and secret exposure incidents alongside software development teams.
- Lead comprehensive threat modeling assessments for new applications and architecture features, identifying attack surfaces and defining secure coding frameworks.
- Govern application security infrastructure, managing centralized vulnerability aggregation dashboards (e.g., DefectDojo, SonarQube) and secret vaults (e.g., HashiCorp Vault, AWS Secrets Manager).
- Secure containerized application workloads, auditing Dockerfile construction rules, verifying baseline machine images, and checking Kubernetes network isolation parameters.
- Drive application layer incident investigations, analyzing malicious payload web requests, API tampering logs, and cross-site scripting (XSS) vectors to improve software perimeters.
Requirements
- 4 to 8 years of core software engineering or cloud DevOps experience, with 3+ dedicated years actively designing, building, and deploying application safety frameworks.
- Strong technical mastery of automated testing engines (e.g., Snyk, Checkmarx, Veracode, OWASP ZAP), container security paradigms, and infrastructure-as-code hardening.
- Deep structural understanding of the OWASP Top 10 vulnerabilities, API security perimeters, modern secure coding standards, and cryptographic signing protocols.
- Mandatory certification: CASE, CDP, CSSLP, or CEH.
Preferred Qualifications
- Prior experience with software development in languages like Java, Python, JavaScript/Node.js, or Go.
- Experience implementing automated code patching routines or managing runtime application self-protection (RASP) layers.
Similar Jobs
Fintech • Legal Tech • Software • Financial Services • Cybersecurity • Data Privacy
Provides onsite and remote IT support for global users, managing high-volume service desk tickets, troubleshooting Microsoft systems, Active Directory, messaging, network, and infrastructure issues. Responsibilities include incident resolution, root-cause analysis, SLA and KPI tracking, monitoring and alerting, documentation, ITIL compliance, service procedure development, and collaboration with technical teams. The role requires rotational shifts, on-call participation, customer focus, and occasional travel when required.
Top Skills:
Active DirectoryAlerting SystemsInfrastructure MonitoringItilMessaging SystemsMicrosoft ExchangeMS OfficeWindowsNetwork Troubleshooting
.jpeg)
Artificial Intelligence • Hardware • Information Technology • Machine Learning
Lead an integrated construction and facilities portfolio supporting manufacturing expansion, facility stabilization, budgeting, risk management, value engineering, governance, and operational readiness. Coordinate multiple projects from planning through commissioning and closeout while managing costs, schedules, dependencies, contractors, stakeholders, and regulatory interfaces. Build organizational capability and implement digital, AI-enabled program controls, analytics, automation, and data governance to improve forecasting, reporting, resource optimization, and executive decision-making.
Top Skills:
Advanced AnalyticsArtificial IntelligenceAutomationDigital Program Controls
Artificial Intelligence • Hardware • Information Technology • Machine Learning
Leads semiconductor test process engineering for Component Test manufacturing. Responsibilities include managing engineers, developing and qualifying processes, improving yield and quality, driving NPI readiness, establishing process controls, integrating equipment and technologies, applying statistical and digital analytics, and advancing Lean and Six Sigma initiatives. The role partners across engineering, manufacturing, quality, suppliers, and global sites while ensuring safety, compliance, operational efficiency, and talent development.
Top Skills:
Ai-Assisted AnalyticsAutomated Test Equipment (Ate)Design Of Experiments (Doe)JmpManufacturing AutomationMinitabPower BIPythonSemiconductor Test ManufacturingSQLStatistical Process Control (Spc)Tableau
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
