DevSecOps

Tata Consultancy Services; Hyderabad; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Tata Consultancy Services is seeking a security-focused professional with DevSecOps and software security expertise in Hyderabad, India. You will work with SCA tools, modern software bill of materials concepts, and AI security considerations to strengthen application security across projects.

The role emphasizes practical tooling knowledge (Snyk, Sonatype, Mend, Black Duck) and ability to communicate complex topics to non-technical stakeholders, with security certifications considered a strong

Qualifications

• Experience in DevSecOps, Application Security, or Software Security.
• Hands-on experience with Snyk, Sonatype, Mend, Black Duck, or equivalent.
• Knowledge of SLSA, Sigstore, SPDX, CycloneDX, CVE/CVSS, Python/Bash scripting.
• Exposure to AI Software Supply Chain Security and AI/LLM security concepts is preferred.
• Experience with SCA tools and dependency management (Maven, npm, pip, etc.).
• Excellent communication skills to explain security concepts to non-technical stakeholders.
• Industry-recognized cybersecurity certifications (CISSP, CRISC, CISM, OSCP) are desirable.

Skills

DevSecOps

Application Security

Cybersecurity concepts

SCA & Dependency Mgmt

Communication skills

Certifications (CISSP/CRISC/CISM/OSCP)

Tools

Snyk

Sonatype

Mend

Black Duck

SLSA/Sigstore/SPDX/CycloneDX

Python/Bash scripting

Job description

• Experience in DevSecOps, Application Security, or Software Security.
• Hands-on experience with Snyk, Sonatype, Mend, Black Duck, or equivalent.
• Knowledge of SLSA, Sigstore, SPDX, CycloneDX, CVE/CVSS, Python/Bash scripting.
• Exposure to AI Software Supply Chain Security, AIBOM concepts, and AI/LLM security is preferred.
• Experience with software composition analysis (SCA) tools and dependency management (Maven, npm, pip, etc.)
• Excellent communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Desirable to have one or more industry-recognized cybersecurity-related certifications including CISSP, CRISC, CISM, OSCP.