Cyber Security (Code & Secrets Management)

Persistent Systems; Pune District; Hybrid; INR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Hybrid work option

Education sponsorship

Long service awards

Job summary

Persistent Systems is seeking a Cyber Security Engineer in Pune with 8–12 years of experience to strengthen security across source code repositories, CI/CD pipelines, and containerized environments. You will drive secure development practices, collaborate with Engineering, DevOps, and Infrastructure teams, and lead remediation efforts within the software development lifecycle.

You will implement secure coding standards, manage secrets and credentials, and automate security gates in deployment

Qualifications

• 8-12 years of experience in Cyber Security, Application Security or Secure Software Engineering.
• Hands-on experience identifying and remediating application security vulnerabilities.
• Deep knowledge of OWASP Top 10 and secure coding practices.

Responsibilities

• Identify, analyze, and remediate security vulnerabilities across source code and pipelines.
• Integrate security controls and automated scanning into CI/CD workflows.
• Collaborate with engineering, DevOps, and infrastructure teams to harden environments and reduce risk.
• Automate security validation, monitoring, and remediation using Python-based tools.

Skills

Cyber Security

Application Security

DevSecOps

Threat Modeling

Python scripting

Secure Coding

GitHub / SCM

Tools

SonarQube

Cycode

Checkmarx

Veracode

Fortify

OWASP ZAP

Job description

We are seeking a highly skilled Cyber Security Engineer with expertise in Application Security, Code Security, Secrets Management, and DevSecOps. The ideal candidate will work closely with Engineering, DevOps, Infrastructure, and Development teams to strengthen security across source code repositories, CI/CD pipelines, cloud-native platforms, and containerized environments. This role is critical in establishing secure development practices, reducing organizational risk, and driving security-by-design principles across the software development lifecycle.

• Role: Cyber Security Engineer
• Location: Pune
• Experience: 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Identify, analyze, and remediate security vulnerabilities across source code repositories using automated and manual assessment techniques.
• Implement and enforce secure coding standards and application security best practices across engineering teams.
• Manage and secure sensitive information such as API keys, passwords, tokens, certificates, and credentials using enterprise secrets management solutions.
• Integrate security controls and automated scanning tools into CI/CD pipelines.
• Perform security assessments and vulnerability remediation activities for applications, repositories, and development environments.
• Collaborate with Development, DevOps, and Engineering teams to prioritize and resolve security findings based on business impact and risk.
• Support secure deployment and configuration of containerized applications using Docker and Kubernetes.
• Work with Infrastructure and Platform teams to harden operating environments and reduce attack surfaces.
• Automate security validation, monitoring, and remediation workflows using Python-based tools and scripts.
• Support repository security, branch protection, access controls, and governance policies.
• Monitor security alerts, vulnerabilities, and threat indicators and drive remediation activities.
• Maintain security standards, policies, technical documentation, and remediation guidelines.
• Participate in architecture reviews and security design assessments.
• Promote security awareness and a security-first culture within engineering teams.
• Support compliance, audit, and governance initiatives related to secure software development.

Expertise You'll Bring:

• 8-12 years of experience in Cyber Security, Application Security, DevSecOps, or Secure Software Engineering.
• Strong understanding of secure software development lifecycle (SSDLC) principles.
• Hands-on experience identifying and remediating application security vulnerabilities.
• Deep knowledge of OWASP Top 10
• Secure Coding Practices
• Threat Modeling
• Vulnerability Management
• Experience implementing Security-by-Design principles within software development environments.
• Strong experience with GitHub or equivalent source code management platforms.
• Knowledge of repository security controls, branch protection, access management, and governance.
• Experience reviewing code for security vulnerabilities and insecure patterns.
• Understanding of software supply chain security and dependency management.
• Experience working with Software Composition Analysis (SCA) tools.
• Hands-on expertise with enterprise secrets management solutions.
• Experience managing API Keys
• Access Tokens
• Credentials
• Certificates
• Encryption Keys
• Knowledge of vault technologies and Key Management Systems (KMS).
• Understanding of secrets rotation, encryption, and secure credential management practices.
• Experience integrating security controls into CI/CD pipelines.
• Strong understanding of DevSecOps methodologies and automation frameworks.
• Knowledge of continuous security testing and compliance validation.
• Experience implementing automated security gates within deployment pipelines.
• Familiarity with release management and secure deployment processes.
• Strong hands-on experience with Docker
• Container Security
• Experience securing containerized workloads and Kubernetes environments.
• Knowledge of container hardening, image scanning, and runtime security controls.
• Exposure to cloud platforms such as Microsoft Azure
• AWS
• Understanding of cloud-native security architectures and controls.
• Strong Python programming and scripting skills.
• Experience developing automation for security monitoring, scanning, and remediation.
• Knowledge of Linux operating systems and administration fundamentals.
• Ability to automate security workflows and operational processes.
• Hands-on experience with security tools such as SonarQube
• Cycode
• Checkmarx
• Veracode
• Fortify
• OWASP ZAP
• Experience with Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Software Composition Analysis (SCA)
• Container Security Scanning
• Familiarity with Infrastructure as Code (IaC) security scanning tools.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalisation for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."