PUNE · FULLTIME
SAST/DAST Engineer
Capgemini
Pune · onsite · Posted 4d ago
Sourced from
Not disclosed5–9 yrsfulltimePune
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
Your Role:
- Lead and manage application security testing activities across multiple applications and projects.
- Oversee and drive engagements involving SAST, DAST, SCA, Grey Box Security Testing, and Threat Modelling.
- Review security findings, perform vulnerability triaging, and provide remediation recommendations to development teams.
- Coordinate closely with application, development, infrastructure, and security stakeholders.
- Drive governance reviews, status reporting, risk tracking, and client communications.
- Ensure compliance with Secure SDLC practices and application security best practices.
- Support integration of security tools and controls within CI/CD pipelines and DevSecOps initiatives.
- Mentor, coach, and provide technical guidance to security testing engineers and team members.
- Promote continuous improvement of application security processes, standards, and methodologies.
- 5 to 9 years of experience in Application Security, Vulnerability Management, or Product Security.
- Strong hands-on expertise in Static Application Security Testing (SAST).
- Strong hands-on expertise in Dynamic Application Security Testing (DAST).
- Experience with Software Composition Analysis (SCA) tools and methodologies.
- Good understanding of Grey Box Security Testing techniques.
- Expertise in Threat Modelling and risk identification.
- Experience conducting Vulnerability Assessments and security reviews.
- Strong knowledge of Secure Software Development Lifecycle (Secure SDLC) practices.
- In-depth understanding of OWASP Top 10 security risks and mitigation techniques.
- Familiarity with OWASP ASVS (Application Security Verification Standard).
- Experience with API Security Testing and securing modern web services.
- Ability to analyze security findings and provide effective remediation guidance to development teams.
- Experience supporting security tool integration within CI/CD pipelines and DevSecOps environments.
- Strong stakeholder management, communication, reporting, and client-facing skills.
- Prior experience leading application security engagements and mentoring junior security engineers.
- Relevant security certifications such as CEH, CSSLP, GWAPT, OSCP, CISSP, or equivalent are desirable.
- You will have the opportunity to learn on one of the industry's largest digital learning platforms, with access to 250,000+ courses and numerous certifications.
- We're committed to ensure that people of all backgrounds feel encouraged and have a sense of belonging at Capgemini. You are valued for who you are, and you can bring your original self to work.
- At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.
- Capgemini office campuses in India are green and run on 100% renewable electricity. We have installed Solar plants across India locations and Battery Energy Storage Solution (BESS) in the Noida and Mumbai campuses. You will have chance to make a difference everyday.
Sourced from foundit
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
Grey Box Security TestingOWASP Top 10 security risksDevsecopsVulnerability AssessmentsAPI Security Testingthreat modelling
Section · Company
About Capgemini
Capgemini
IT Services & Consulting
235k+
employees
1967
59 years old
Mumbai, Maharashtra
India
About
Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value.
Industries
IT Services & ConsultingAnalytics & KPOBankingSoftware Product
Employee ratings
53,345 reviews
3.6/ 5
Culture
3.6
Career growth
2.8
Work-life
3.8
Employees rate it well for
Work Life Balance7494Salary7201Work Culture5032Appraisal4419Senior Management3872
Find them on