Information Security Engineer

Tredence Inc.; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tredence Inc. in Bengaluru is seeking a Consultant - DevSecOps & Validation to strengthen the Secure Software Development Lifecycle (SSDLC) and Vulnerability Management across applications, cloud platforms, and CI/CD environments.

You will collaborate with development, cloud, infrastructure, and security teams to identify, assess, and remediate security vulnerabilities, build and review pipelines using Jenkins, GitHub Actions, GitLab, and Azure DevOps, and perform VAPT for web, mobile, API, and

Qualifications

• 2-5 years of experience in Information Security or DevSecOps.
• Strong knowledge of OWASP Top 10, CVE/CVSS, MITRE ATT&CK.
• Hands-on with SAST/DAST/IAST, container security, and vulnerability management.
• Experience with security tools such as Qualys, Veracode, Burp Suite, Nessus, Snyk.
• Scripting in Python, Shell, PowerShell, JavaScript.

Responsibilities

• Implement Secure SDLC and DevSecOps practices across the organization.
• Build and troubleshoot CI/CD pipelines (Jenkins, GitHub Actions, GitLab, Azure DevOps).
• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web, mobile, API, cloud, and AI applications.
• Integrate and manage security tools (SAST, DAST, SCA, container scanning, secret scanning).
• Monitor vulnerability posture and coordinate remediation with stakeholders.
• Stay updated on emerging cyber threats and security best practices.

Skills

Info Security

DevSecOps

App Security

Education

Engineering degree in Computer Science / IT / Cyber Security

Tools

SAST

DAST

SCA

IAST

CI/CD Security

Container Security

Qualys

Veracode

Burp Suite

OWASP ZAP

Job description

Job Description - Consultant, DevSecOps & Validation

Location: Bangalore
Department: Information Security Group (ISG)
Role: Consultant - DevSecOps & Validation
Experience: 2-5 Years
Employment Type: Full-Time

About the Role

We are looking for a skilled and motivated Consultant - DevSecOps & Validation to strengthen our Secure Software Development Lifecycle (SSDLC) and Vulnerability Management program. The candidate will work closely with development, cloud, infrastructure, and security teams to identify, assess, and remediate security vulnerabilities across applications, cloud platforms, and CI/CD environments.

Key Responsibilities

• Implement and drive Secure SDLC and DevSecOps practices across the organization.
• Build, review, and troubleshoot CI/CD pipelines using Jenkins, GitHub Actions, GitLab, and Azure DevOps.
• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web, mobile, API, cloud, and AI applications.
• Integrate and manage security tools such as SAST, DAST, SCA, container scanning, and secret scanning.
• Monitor organizational vulnerability posture and coordinate remediation with stakeholders.
• Conduct security gap assessments and recommend security improvements.
• Review security exceptions and ensure compliance with organizational security standards.
• Stay updated on emerging cyber threats, vulnerabilities, and security best practices.

Required Skills

• 2-5 years of experience in Information Security, DevSecOps, or Application Security.

• Strong understanding of:

  • OWASP Top 10
  • CVE/CVSS
  • OWASP ASVS
  • SANS Top 25
  • MITRE ATT&CK Framework
  • Cyber Kill Chain

• Hands-on experience with:

  • SAST, DAST, SCA, IAST
  • Container Security & Vulnerability Management
  • CI/CD Security

• Experience with security tools such as:

  • Qualys, Rapid7, Checkmarx, Veracode
  • Snyk, Black Duck, Trivy, Semgrep
  • OWASP ZAP, Burp Suite, GitGuardian
  • Nessus, Nmap, Wireshark, Metasploit, Kali Linux

• Scripting and automation knowledge in:

  • Python
  • Shell Scripting
  • PowerShell
  • JavaScript
  • SQL

Preferred Qualifications

• Engineering degree in Computer Science, Information Technology, Cyber Security, or related field.
• Relevant certifications such as:
  • OSCP
  • CEH
  • eJPT
  • Security+

Key Competencies

• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Self-driven, proactive, and detail-oriented.
• Passion for cybersecurity and continuous learning.

If you are passionate about Application Security, DevSecOps, and Vulnerability Management, and want to work in a fast-paced security-driven environment, we would love to hear from you.