DevSecOps Engineer (SAST/DAST)

Alignity Solutions; Hyderabad; Hybrid; INR 1,200,000 - 1,800,000; Part time

Benefits offered by this job

Hybrid work model

Job summary

Alignity Solutions in Hyderabad is seeking a DevSecOps Engineer (SAST/DAST) to strengthen application security across the SDLC. You will integrate security testing into CI/CD pipelines and collaborate with DevOps to remediate findings.

The role demands hands-on SAST/DAST, vulnerability management, and security automation using tools like SonarQube, Checkmarx, Fortify, Burp Suite, and OWASP ZAP. This is a hybrid, contract-to-hire position with immediate joiners.

Qualifications

• Experience implementing SAST/DAST in CI/CD pipelines.
• Experience in vulnerability management and security remediation within SDLC.
• Strong understanding of application security and secure SDLC.

Responsibilities

• Implement and manage SAST/DAST across applications and CI/CD pipelines.
• Integrate security testing tools into DevOps/CI-CD pipelines and automate security testing.
• Perform and support application penetration testing to identify vulnerabilities.
• Analyze results and validate findings; work with developers to remediate.
• Develop and maintain security gates and policies within CI/CD pipelines.

Skills

DevSecOps

Security testing

CI/CD collaboration

Vulnerability management

Security automation

Penetration testing

Threat knowledge

Tools

SonarQube

Checkmarx

Fortify

Veracode

Burp Suite

OWASP ZAP

Jenkins

GitLab CI/CD

Azure DevOps

GitHub Actions

Docker

Kubernetes

Job description

Seri Lingampally, India | Posted on 09/03/2026

Do you love a career where you Experience , Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you.

Learn how we are redefining the meaning of work , and be a part of the team raved by Clients, Job-seekers and Employees.

If you are a DevSecOps Engineer (SAST/DAST) looking for excitement, challenge and stability in your work, then you would be glad to come across this page.

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.

Check if you are up for maximising your earning/growth potential, leveraging our Disruptive Talent Solution.

Work Mode: Hybrid

Type: Contract to Hire

Notice Period:Immediate Joiners

Requirements

We are looking for an experienced DevSecOps Engineer with strong expertise in SAST, DAST, and Penetration Testing to strengthen application security across the software development lifecycle. The ideal candidate will have hands-on experience integrating security testing into CI/CD pipelines, identifying application vulnerabilities, and working closely with development and DevOps teams to remediate security findings.

The candidate should have a strong understanding of application security, DevSecOps practices, vulnerability management, and security automation.

Key Responsibilities

• Implement and manage SAST and DAST security testing across applications and CI/CD pipelines.
  
• Integrate application security tools into DevOps/CI-CD pipelines and automate security testing.
  
• Perform and support application penetration testing to identify security vulnerabilities.
  
• Analyze SAST/DAST and penetration testing results and validate security findings.
  
• Work with development teams to understand, prioritize, and remediate identified vulnerabilities.
  
• Conduct vulnerability assessment and provide recommendations for effective remediation.
  
• Develop and maintain security gates and policies within CI/CD pipelines.
  
• Collaborate with DevOps, developers, architects, and security teams to embed security throughout the SDLC.
  
• Track vulnerabilities through remediation and perform retesting/validation .
  
• Help reduce false positives and improve the quality of automated security scans.
  
• Prepare security assessment reports, dashboards, and management-level summaries.
  
• Support continuous improvement of DevSecOps processes, security automation, and application security controls .
  
• Stay current with emerging application security threats, vulnerabilities, and industry best practices.
  

Required Skills

Application Security

• Strong understanding of Application Security and Secure SDLC .
  
• Hands-on experience with SAST and DAST methodologies.
  
• Experience in Web Application Security and API Security .
  
• Good knowledge of common vulnerabilities including OWASP Top 10 .
  
• Understanding of vulnerability severity, risk assessment, and remediation.
  

SAST / DAST Tools

Experience with one or more application security tools such as:

• SonarQube
  
• Checkmarx
  
• Fortify
  
• Veracode
  
• Burp Suite
  
• OWASP ZAP
  
• Similar SAST/DAST and application security tools.
  

DevSecOps / CI-CD

• Hands-on experience with CI/CD pipelines .
  
• Good understanding of Jenkins, GitLab CI/CD, Azure DevOps, GitHub Actions , or similar tools.
  
• Experience integrating security scanning into automated build and deployment pipelines.
  
• Understanding of Docker/Kubernetes and cloud environments is an advantage.
  
• Experience with scripting/automation using Python, PowerShell, or Shell scripting is preferred.
  

Penetration Testing

• Knowledge of Web Application and API Penetration Testing .
  
• Ability to identify and validate common security vulnerabilities.
  
• Familiarity with tools such as Burp Suite, OWASP ZAP, Nmap , and similar security testing tools.
  
• Understanding of authentication, authorization, session management, input validation, and API security.