Security Engineer - SAST & SCA
Sonata Software · Bengaluru · onsite · Posted 48d ago
Undisclosed4–7 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
ABOUT SONATA SOFTWARE
Sonata Software, with over $1.2 Billion Revenue, is aleading AI-first Modernization Engineering company, powered by our uniquePlatformation TM framework. Our 6400+ AI Engineers are helpingenterprises transform from systems to intelligent business platforms leveragingpartner ecosystem to drive speed, efficiency and growth. Our bouquet ofModernization Engineering Services with AI -first approach cuts across Cloud,Data, AI, Dynamics, Test Automation, and Managed Services.
Sonatas AI-led modernization is enabled by a powerful suiteof proprietary tools and assets. At the core is the Harmoni.AI EnterprisePlatform, which includes Agent Bridge -a governance andobservability framework; Agent Builder -a development toolkit forfungible agents integrated into enterprise systems; and the AgentMarketplace -an internal ecosystem for modular, reusable agents.
Headquartered in Bengaluru, India, Sonata Software has astrong global presence, including key regions US, UK, India, Malaysia, Mexico,Australia, DACH (Germany/Switzerland) Nordics (Finland). We are a trustedpartner of Fortune 500 companies in Banking, Financial Services and Insurance;Healthcare and Lifesciences; Telecom, Media, and Technology; and Retail,Manufacturing and Distribution space.
Deep collaborations with partners like Microsoft, AWS,Salesforce, and Snowflake strengthen our ability to deliver cutting-edge AIsolutions. Our 30+years of partnership with Microsoft, and being part of theelite Microsoft Inner Circle, places us among the top 1% of global Microsoftpartners. Sonata is now among the first companies to earn the MicrosoftFrontier Partner Badge Also; Sonata Software is proud to achieve AWSPremier Tier Status in the AWS Partner Network.
Job Title- Security Engineer SAST SCA(Application Security)
Location- Noida
Experience : 4 - 7 years
Mandatory skills : SAST, SCA,
Job Description :
We are looking for a Security Engineer SAST SCA to join our Application Security team. The ideal candidate will have hands-on experience with Static Application Security Testing (SAST) and Software Composition Analysis (SCA) tools, helping development teams identify, prioritize, and remediate application and open-source vulnerabilities throughout the SDLC.
Key Responsibilities - Perform static code analysis and open-source dependency scanning using SAST and SCA tools.
- Analyze and prioritize security findings and work with development teams to drive remediation.
- Integrate security scanning into CI/CD pipelines and automate security workflows.
- Manage vulnerability lifecycle, reporting, and compliance metrics.
- Promote secure coding practices and provide remediation guidance to engineering teams.
- Support DevSecOps initiatives and shift-left security adoption.
- 36+ years of experience in Application Security, DevSecOps, or Secure Software Development.
- Hands-on experience with SAST tools such as Checkmarx, Fortify, Veracode, or CodeQL .
- Experience with SCA tools such as Snyk, Black Duck, Mend (WhiteSource), Sonatype, or Dependabot .
- Strong understanding of OWASP Top 10 , secure coding practices, and vulnerability management.
- Experience integrating security tools with GitHub, GitLab, Jenkins, or Azure DevOps .
- Scripting knowledge in Python, Bash, or PowerShell .
- Excellent communication and collaboration skills.
- Experience with SBOM, container security, IaC security , or cloud-native application security.
- Certifications such as CSSLP, GWAPT, or OSCP are a plus.
Why join Sonata Software
At Sonata, youll have an outstanding opportunity. Thechance to use your skills and imagination to push the boundaries of whatspossible. To build never seen before solutions to some of the worlds toughestproblems. Youll be challenged, but you will not be alone. Youll be joining ateam of diverse innovators, all driven to go beyond the status quo to craftwhat comes next.
Sonata Software is an Equal Opportunity Employer encouragingdiversity in the workplace. All qualified applicants will receive considerationfor employment without regard to race, national origin, gender identity, age,religion, disability, sexual orientation, veteran status, marital status, orany other characteristics protected by law.
Sourced from naukri
Skills
SDLCJenkinsDevopsTerraformBashGitlabGithubamazon web servicesOscpApplication Security TestingDevsecopssastBankingPythonVulnerability ManagementApplication SecuritysalesforcecomplianceSnowflakePowershellMicrosoft AzureArtificial IntelligenceInsurance
About Sonata Software
Sonata Software
IT Services & Consulting
6.4k+
employees
1986
40 years old
Bangalore/Bengaluru, Karnataka
India
About
Sonata Software Limited is a leading Modernization engineering company, headquartered in Bangalore.
Industries
IT Services & Consulting
Employee ratings
1,480 reviews
3.4/ 5
Culture
3.3
Career growth
2.8
Work-life
3.6
Employees rate it well for
Salary181Work Life Balance180Job Security129Senior Management126Work Culture120
Find them on