1. Home
  2. Jobs
  3. Jobs in Bangalore
  4. TC - CS - CTM - Appsec - Sr Professional
Agent
Jobs
Applied
Tracker
Profile
    1. Jobs for you
    2. Job

    Job · 22857289

    Ernst Young logo

    TC - CS - CTM - Appsec - Sr Professional

    Ernst Young · Bengaluru · onsite · Posted 1d ago

    Undisclosed3–8 yrsfulltimeSourced fromNaukri

    About a minute. You'll make an account on the way through.

    About this role

    Job Summary
    Position Title: EYGDS_Cyber Security DevSecOps Senior
    As part of our Cyber Security team, you will implement and support Secure SDLC (SSDLC) and DevSecOps practices across the software development lifecycle, ensuring security is embedded into design, development, testing, and deployment stages.
    You will perform hands-on security assessments of applications, APIs, and supporting infrastructure, and work closely with DevOps, Architects, Developers, and QA teams to integrate security into CI/CD pipelines. You will analyze security findings, provide remediation guidance, and contribute to building secure, scalable application delivery practices.
    We're looking for a Senior Consultant - DevSecOps / Application Security with strong hands-on expertise in secure SDLC and pipeline security. This role offers the opportunity to work on end-to-end DevSecOps implementations, supporting clients and engineering teams in embedding security across CI/CD pipelines.
    You will collaborate with cross-functional teams to implement Security as Code (SaC), automation, and cloud-native security controls, while contributing to the adoption of AI-assisted security capabilities and modern application security practices.


    Your Key Responsibilities
    • Implement Secure SDLC (SSDLC) practices across application development and CI/CD pipelines.
    • Perform application security assessments including SAST, DAST, SCA, and basic threat modeling.
    • Integrate and automate security tools within CI/CD pipelines (e.g., secret scanning, IaC scanning, container security).
    • Support development teams in secure coding practices, vulnerability remediation, and code reviews.
    • Work on DevSecOps pipeline implementation and optimization using enterprise and open-source tools.
    • Assist in threat modeling exercises (e.g., STRIDE) and secure design reviews.
    • Develop scripts and automation for security testing, reporting, and tool integration.
    • Collaborate with DevOps and cloud teams to implement security controls in cloud environments (AWS/Azure/GCP).
    • Analyze security findings and create detailed reports with risks, exploitation scenarios, and remediation steps.
    • Support adoption of container security, IaC security, and compliance-as-code practices.
    • Contribute to AI-assisted security use cases, such as automated triaging, code analysis, and developer productivity tools.
    • Stay current with emerging security threats, vulnerabilities, and DevSecOps trends.


    Skills and Attributes for Success
    • Strong hands-on experience in application security testing (SAST, DAST, SCA).
    • Experience working with CI/CD pipelines and DevOps tools (Jenkins, Azure DevOps, GitHub/GitLab).
    • Proficiency in scripting/programming (Python, PowerShell, Java, etc.).
    • Familiarity with DAST tools (Burp Suite, WebInspect, AppScan), SAST,SCA tools (Checkmarx, Fortify, Veracode, Coverity).
    • Understanding of OWASP Top 10 and secure coding practices.
    • Experience with cloud platforms (AWS/Azure/GCP) and basic cloud security concepts.
    • Exposure to container technologies and security tools (Docker, Kubernetes).
    • Understanding of DevSecOps practices and SSDLC frameworks (OWASP SAMM, NIST SSDF).
    • Hands-on experience with SCM tools (GitHub, GitLab, Bitbucket) and pipeline integrations.
    • Good understanding of threat modeling concepts (e.g., STRIDE).


    Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

    Sourced from naukri

    Skills

    AutomationAzure DevopsCI/CD Pipelinesapisamazon web servicesbitbucketBurp SuiteAnalyticsCapital MarketsCheckmarxAppscancloudAws SecurityAzure SecurityApplication SecurityAccountingApplication DevelopmentMicrosoft AzureArtificial Intelligence

    About Ernst & Young

    Ernst Young logo

    Ernst Young

    Management Consulting

    44k+

    employees

    2002

    24 years old

    Gurgaon / Gurugram, Haryana

    India

    ₹15.3L PA avg

    Avg at Ernst & Young

    About

    At EY, our purpose is Building a better working world. The insights and quality services we provide help build trust and confidence in the capital markets and in economies the world over.

    Industries

    Management Consulting

    Employee ratings

    10 reviews

    3.4/ 5

    Culture

    1.9

    Career growth

    2.3

    Work-life

    2.5

    Employees rate it well for

    Job Security36Skill Development35

    Find them on

    WebsiteLinkedInAmbitionBox reviews

    Jobs in Bangalore

    Career guides

    • How to Build a Job Application Automation in 2026: Architecture, ATS APIs and Code - and When to Buy Instead
    • Auto-Apply Tool Prices in India (2026): 12 Tools Compared in Rupees per Month and per Application
    • How to find sales jobs in India faster with AI (2026 guide)

    All career guidesAll articlesBrowse companies hiring

    TC - CS - CTM - Appsec - Sr Professional · waiting for your command