MUMBAI · FULLTIME
Consultant/Senior Consultant- SAST App Sec Secret Managemet in Pune
Ernst Young
Mumbai · onsite · Posted 5d ago
Sourced from
Not disclosed4–6 yrsfulltimeMumbai
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
Requisition Id: 1741666
As a global leader in assurance, tax, transaction and advisory services, we hire and develop the most passionate people in their field to help build a better working world. This starts with a culture that believes in giving you the training, opportunities and creative freedom. At EY, we don't just focus on who you are now, but who you can become. We believe that it's your career and It's yours to build which means potential here is limitless and we'll provide you with motivating and fulfilling experiences throughout your career to help you on the path to becoming your best professional self.
The opportunity :
As discussed today, we have requirement for one of our client , for Pune locaƟon on Appsec Secrets
Management professional
Govern and track Secrets fi ndings across repositories, ensuring remediaƟon within defi ned SLAs.
Coordinate with development, plaƞorm, risk, and compliance teams on remediaƟon, excepƟons, deferrals, and
risk acceptances.
Maintain governance artefacts, audit-ready documentaƟon, metrics, dashboards, and execuƟve reporƟng.
Monitor remediaƟon progress, idenƟfy overdue items, and drive stakeholder escalaƟons as required.
Act as the primary point of contact for developer and stakeholder queries, providing guidance on fi ndings,
remediaƟon, and governance processes.
Analyze fi ndings from approved security tools, validate closure evidence, review false posiƟves, and support
process improvements.
Deliver weekly/monthly governance reports covering remediaƟon trends, ageing fi ndings, excepƟons, and
overall risk posture.
Work on fi netuning the secret scanning rule sets for reducing noise due to false posiƟves
What We Look For
People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful, and able to sustain positive energy, while being adaptable and creative in their approach.
What We Offer
Fuelled by the brilliance of our people, EY has emerged as the strongest brand and the most attractive employer in our field, with market-leading growth over competitors. Our people work side-by-side with market-leading entrepreneurs, game-changers, disruptors, and visionaries. As an organization, we are investing more time, technology, and money than ever before in skills and learning for our people. At EY, you will have a personalized Career Journey and also the chance to tap into the resources of our career frameworks to better know about your roles, skills, and opportunities.
EY is equally committed to being an inclusive employer, and we strive to achieve the right balance for our people—enabling us to deliver excellent client service while allowing our people to build their careers as well as focus on their wellbeing.
If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.
Join us in shaping the future with confidence. Apply Now
As a global leader in assurance, tax, transaction and advisory services, we hire and develop the most passionate people in their field to help build a better working world. This starts with a culture that believes in giving you the training, opportunities and creative freedom. At EY, we don't just focus on who you are now, but who you can become. We believe that it's your career and It's yours to build which means potential here is limitless and we'll provide you with motivating and fulfilling experiences throughout your career to help you on the path to becoming your best professional self.
The opportunity :
As discussed today, we have requirement for one of our client , for Pune locaƟon on Appsec Secrets
Management professional
- Experience:
- 4–5 years of experience in ApplicaƟon Security, SSDLC, Governance, or similar roles.
- Bachelor's Degree in IT, Engineering, or a related fi eld.
- Strong understanding of secrets exposure risks (API keys, tokens, passwords, cerƟfi cates).
- Experience reviewing secrets scanning outputs and validaƟng remediaƟon acƟons.
- Working knowledge of SAST concepts and governance workfl ows.
- Familiarity with GitHub and CI/CD environments.
- Strong documentaƟon, coordinaƟon, and communicaƟon skills.
- Exposure to Checkmarx tools.
- Familiarity with enterprise tracking tools (e.g., ServiceNow).
- Familiarity with Security Governance.
Govern and track Secrets fi ndings across repositories, ensuring remediaƟon within defi ned SLAs.
Coordinate with development, plaƞorm, risk, and compliance teams on remediaƟon, excepƟons, deferrals, and
risk acceptances.
Maintain governance artefacts, audit-ready documentaƟon, metrics, dashboards, and execuƟve reporƟng.
Monitor remediaƟon progress, idenƟfy overdue items, and drive stakeholder escalaƟons as required.
Act as the primary point of contact for developer and stakeholder queries, providing guidance on fi ndings,
remediaƟon, and governance processes.
Analyze fi ndings from approved security tools, validate closure evidence, review false posiƟves, and support
process improvements.
Deliver weekly/monthly governance reports covering remediaƟon trends, ageing fi ndings, excepƟons, and
overall risk posture.
Work on fi netuning the secret scanning rule sets for reducing noise due to false posiƟves
What We Look For
People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful, and able to sustain positive energy, while being adaptable and creative in their approach.
What We Offer
Fuelled by the brilliance of our people, EY has emerged as the strongest brand and the most attractive employer in our field, with market-leading growth over competitors. Our people work side-by-side with market-leading entrepreneurs, game-changers, disruptors, and visionaries. As an organization, we are investing more time, technology, and money than ever before in skills and learning for our people. At EY, you will have a personalized Career Journey and also the chance to tap into the resources of our career frameworks to better know about your roles, skills, and opportunities.
EY is equally committed to being an inclusive employer, and we strive to achieve the right balance for our people—enabling us to deliver excellent client service while allowing our people to build their careers as well as focus on their wellbeing.
If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.
Join us in shaping the future with confidence. Apply Now
Sourced from foundit
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
passwordssecrets exposure risksenterprise tracking toolsGithubCheckmarx toolsreviewing secrets scanning outputsSAST conceptsServicenowsecurity governanceAPI keysTokens
Section · Company
About Ernst & Young
Ernst Young
Management Consulting
44k+
employees
2002
24 years old
Gurgaon / Gurugram, Haryana
India
₹15.3L PA avg
Avg at Ernst & Young
About
At EY, our purpose is Building a better working world. The insights and quality services we provide help build trust and confidence in the capital markets and in economies the world over.
Industries
Management Consulting
Employee ratings
10 reviews
3.4/ 5
Culture
1.9
Career growth
2.3
Work-life
2.5
Employees rate it well for
Job Security36Skill Development35
Find them on