BENGALURU · FULLTIME
Sr. Devsecops Security Engineer
Atos
Bengaluru · onsite · Posted 41d ago
Sourced from
Undisclosed5–7 yrsfulltimeBengaluru
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.3s
- Found the form on Naukri · 14 questions to answer1.7s
- Decided the answers for all of them2.7s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Job Summary
Responsibilities
Requirements
Tools Knowledge
Preferred Qualifications
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
We are looking for a highly experienced Senior DevSecOps Security Engineer to lead cybersecurity testing initiatives across web applications, APIs, CI/CD pipelines, and software supply chain environments. The ideal candidate will have strong hands-on experience integrating security into the SDLC and driving secure-by-design practices across development, QA, and production environments.
Responsibilities
- Lead and execute DevSecOps operations and cybersecurity testing for web applications and APIs.
- Perform and review Static Application Security Testing (SAST), including detailed source code review.
- Conduct Dynamic Application Security Testing (DAST) across development and pre-production environments.
- Design and execute fuzzing activities for applications and APIs.
- Perform Software Composition Analysis (SCA) to identify vulnerable open-source dependencies and third-party components.
- Assess and test CI/CD pipelines for security gaps, misconfigurations, and privilege escalation opportunities.
- Conduct software supply chain security testing and identify risks in build, artifact, and deployment processes.
- Drive security testing before the Quality Assurance (QA) phase to enable shift-left security practices.
- Define and implement security testing practices across the SDLC.
- Work closely with development, QA, DevOps, and architecture teams to embed cybersecurity testing into sprint cycles.
- Identify security test scenarios during sprint planning.
- Create, maintain, and automate security test cases.
- Execute and validate security test cases across Dev, UAT, and Production promotion stages.
- Review and validate remediation activities and provide risk-based recommendations.
- Mentor junior engineers, review their reports and contribute to security best practices, standards, and governance.
Requirements
- 5-7 years of experience in Application Security Testing, DevSecOps.
- Strong hands-on experience in web application security testing and API security testing.
- Proven experience in: SAST (secure code review); DAST; Fuzzing; Software Composition Analysis (SCA); CI/CD pipeline security testing; Software supply chain security testing.
- Strong understanding of SDLC, secure coding practices, and shift-left security.
- Experience creating and automating security test cases in agile/sprint-based environments.
- Familiarity with OWASP Top 10, API Security Top 10, and common application security vulnerabilities.
- Experience working with development, DevOps, QA, and product teams.
- Strong analytical, communication, and stakeholder management skills.
Tools Knowledge
- JFrog
- SonarQube
- Burp Suite
- Nessus
- XRAY
- JIRA
- Microsoft Threat Modeling Tool
- Postman
Preferred Qualifications
- Experience with cloud platforms such as AWS, Azure, or GCP.
- Knowledge of container security, Kubernetes security, and Infrastructure-as-Code security.
- Experience integrating security tools into CI/CD pipelines.
- Relevant certifications such as CISSP, CSSLP, GWAPT, or DevSecOps-related certifications.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Section · 02
Skills
DevopsAgileCI/CD Pipelinescloud platformsapisapi securityamazon web servicescontainer securityAutomatingBurp SuitecisspdastContainerdeploymentCybersecurity TestingcloudCyber SecurityApplication SecurityArchitectureMicrosoft Azure
Section · Company
About Atos
Atos
IT Services & Consulting
17.6k+
employees
2000
26 years old
Navi Mumbai, Maharashtra
India
About
Atos is a global leader in digital transformation with 111,000 employees
Industries
IT Services & ConsultingConsultingHealthcare / Pharma
Employee ratings
4,954 reviews
3.8/ 5
Culture
3.7
Career growth
3.0
Work-life
4.1
Employees rate it well for
Work Life Balance687Salary613Work Culture518Senior Management489Job Security375
Find them on