DevSecOps/ AppSecOps Staff Engineer

First American (India); India; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A leading technology firm in India is seeking a Platform Security Engineer to strengthen its DevSecOps practices. This role requires over 7 years of experience in application development and specific expertise in Application Security and DevSecOps. The ideal candidate will manage vulnerabilities, enhance security measures, and work collaboratively with various engineering teams. Strong knowledge in cloud services and security tools is essential. Competitive compensation and full-time employment offered.

Qualifications

• Over 7 years of hands-on experience in application development and DevOps.
• At least 3 years specialized in DevSecOps or AppSecOps.
• Deep understanding of application, infrastructure, and cloud security principles.

Responsibilities

• Take end-to-end responsibility for application security initiatives.
• Identify and resolve security vulnerabilities across different environments.
• Lead efforts to detect, assess, and remediate vulnerabilities.

Skills

Application Development

DevOps

DevSecOps

Application Security

Cloud Security

Networking

IAM

Scripting knowledge (Python)

Security best practices

Vulnerability management

Tools

Veracode

Prisma Cloud/Compute

Qualys

Job description

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from First American (India)

Global Talent Acquisition Lead, Tech Talent Hiring for APAC, EMEA, NA and LATAM Regions- Leadership Hiring I Driving Hiring Strategies| Employer…

At First American (India), we don’t just build software—we build the future of real estate technology. Our people-first culture empowers bold thinkers and passionate technologists to solve real-world challenges through scalable architecture and innovative design.

If you're driven by impact, thrive in collaborative environments, and want to shape how world-class products are delivered, this is the place for you.

Job Title: DevSecOps/ AppSecOps Staff Engineer

About the Role

We are looking for an experienced Platform Security Engineer with strong expertise in DevSecOps and Application Security (AppSec) to join our Security team. In this role, you will be instrumental in designing, building, and maintaining secure platforms and tooling that empower our development teams to deliver software efficiently, while embedding security throughout the development lifecycle. You’ll collaborate closely with engineering teams to integrate security best practices, automate controls, and ensure our platforms are resilient, compliant, and scalable.

What You Will Do:

• Application Security Ownership: Take end-to-end responsibility for application security initiatives, including vulnerability remediation, conducting security reviews, and educating internal teams on secure coding practices and standards.
• Technical Issue Resolution: Proactively identify, investigate, and resolve security vulnerabilities across applications, infrastructure, and cloud environments.
• Vulnerability Management: Lead efforts to detect, assess, and remediate infrastructure and software vulnerabilities, ensuring timely patching and mitigation in alignment with security policies.
• Cross-Functional Alignment and Cross-Team Collaboration: Collaborate with engineering, infrastructure, and compliance teams to ensure that platform capabilities and security measures align with broader organizational objectives.
• Continuous Improvement and Strategic Thinking:: Drive initiatives to continuously enhance platform security and efficiency using DevSecOps skills, by optimizing workflows, automating controls, and implementing industry best practices to align efforts with organizational goals.
• Familiarity with DAST, SAST, and IAST Testing for comprehensive application security assessments.

What You Bring:

• Over 7 years of hands-on experience in Application Development and DevOps, including at least 3 years of specialized experience in DevSecOps or AppSecOps domain.
• Deep understanding of application, infrastructure, and cloud security principles. Proven experience in identifying, remediating, and preventing vulnerabilities across the stack.
• Advanced knowledge of AWS/GCP and Azure, Networking, IAM, encryption, and compliance controls.
• Experience with tools like Veracode, Prisma Cloud\Compute, Qualys to detect and remediate vulnerabilities in code, containers, and infrastructure.
• Ability to guide teams in addressing OWASP Top 10 and SANS Top 25 vulnerabilities, conduct threat modeling, and perform secure code reviews and penetration testing.
• Familiarity with DAST, SAST, and IAST Testing for comprehensive application security assessments.
• Excellent communication, critical thinking, and problem-solving skills. Comfortable working independently or collaboratively in fast-paced, high-stakes environments.
• Generate detailed vulnerability reports with proof-of-concept (PoC) evidence, risk ratings, and actionable remediation recommendations.

Good To Have:

• Scripting knowledge, mainly with Python.
• Experience in bringing awareness across engineering teams, and embedding security into the SDLC.
• Strong ability to document technical findings, communicate risks and recommendations clearly to developers, and advocate for security best practices.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology and Engineering

Industries

Technology, Information and Media and Information Services

Referrals increase your chances of interviewing at First American (India) by 2x

Get notified about new Staff Engineer jobs in India.