Lead Application Security & DevSecOps Architect

Mployee.me; Pune District; Hybrid; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Hybrid work model

Flexible work hours

Annual health check-ups

Comprehensive insurance coverage

Job summary

Persistent seeks an experienced Lead Application Security & DevSecOps Architect to drive enterprise‑wide security across the software development lifecycle. You will embed security controls, lead programs, and shape secure-by-design practices for cloud‑native and on‑premises environments.

The role requires 12–15 years in Application Security, strong governance, and hands‑on expertise with major security tools. Hybrid work with a focus on risk‑based security governance.

Qualifications

• 12–15 years of experience in Application Security, DevSecOps, or Cybersecurity Architecture.
• Experience leading enterprise security programs and DevSecOps by embedding secure practices across SDLC.
• Strong understanding of secure design principles and security governance.

Responsibilities

• Define enterprise Secure SDLC standards and security governance frameworks.
• Lead threat modeling and security reviews for critical applications.
• Operationalize DevSecOps across pipelines and cloud environments.

Skills

Application Security

DevSecOps

Secure SDLC

Threat Modeling

OWASP Top 10

CWE/SANS Top 25

MITRE ATT&CK

ASVS

NIST SSDF

Security Architecture

CI/CD Security

Cloud Security

Kubernetes Security

Education

Bachelor's degree in Computer Science/IT/Cyber Security/Engineering

Tools

Checkmarx

Veracode

Fortify

SonarQube

Snyk

Black Duck

Mend

Prisma Cloud

Aqua Security

Job description

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 18 of the Fortune 50 companies, 7 of the 10 top US banks, 9 of the 10 technology companies, and numerous innovators across the healthcare ecosystem.

Our disruptor’s mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We have delivered 26 sequential quarters of growth with $487.6M in Q4 FY26 revenue, up 7.8% Q‑o‑Q and 20.0% Y‑o‑Y. Our 29,500+ global team members, located in 21 countries, have been instrumental in helping the market leaders transform their industries. We received five awards at the ISG (Information Services Group) Provider Lens™ Awards 2026 and, for the second year in a row, were awarded the Growth Honor of the Year at the Everest Group Elevate 2026.

About Position

We are seeking an experienced Lead Application Security & DevSecOps Architect to drive enterprise‑wide application security and DevSecOps initiatives across the software development lifecycle. This role is responsible for embedding security controls into design, development, testing, deployment, and operational processes while enabling engineering teams to build secure‑by‑design applications. The ideal candidate will lead application security programs, establish Secure SDLC standards, implement DevSecOps practices, and drive risk‑based security governance across cloud‑native and enterprise application environments.

• Role: Lead Application Security & DevSecOps Architect
• Location: Pune
• Experience: 12 to 15 Years
• Job Type: Full-Time Employment

What You’ll Do

• Define and implement enterprise Secure SDLC standards, security policies, and application security governance frameworks.
• Lead threat modeling, secure architecture reviews, design assessments, and security risk evaluations for critical applications.
• Establish and operationalize DevSecOps practices across software delivery pipelines and cloud environments.
• Integrate SAST, DAST, SCA, secret scanning, container security, API security, and Infrastructure as Code (IaC) security testing into CI/CD pipelines.
• Design and enforce security gates, risk‑based controls, exception management processes, and remediation workflows.
• Partner with engineering teams to prioritize, triage, and remediate security vulnerabilities based on business risk.
• Conduct application security assessments, code reviews, penetration testing reviews, and security validation activities.
• Define secure coding standards aligned with OWASP Top 10, CWE, NIST Secure Software Development Framework (SSDF), and industry best practices.
• Implement security controls for APIs, microservices, cloud‑native applications, containers, and Kubernetes environments.
• Drive developer security awareness programs, secure coding workshops, and security champion initiatives.
• Establish security metrics, KPIs, dashboards, and executive reporting for application security programs.
• Collaborate with architecture, cloud, infrastructure, DevOps, compliance, and risk teams to ensure end‑to‑end security integration.
• Evaluate and implement modern application security and DevSecOps tooling across the organization.
• Lead security governance forums, design reviews, risk assessments, and continuous improvement initiatives.
• Mentor security engineers, DevSecOps specialists, and application development teams on security best practices.

Expertise You’ll Bring

• 12‑15 years of experience in Application Security, Product Security, DevSecOps, Secure Engineering, or Cybersecurity Architecture.
• Extensive hands‑on experience establishing and managing enterprise Application Security and DevSecOps programs.
• Strong expertise in Secure SDLC methodologies, threat modeling, security architecture reviews, and secure design principles.
• Deep knowledge of OWASP Top 10, CWE/SANS Top 25, MITRE ATT&CK, ASVS, NIST SSDF, and secure coding best practices.
• Experience integrating security testing tools such as Checkmarx, Veracode, Fortify, SonarQube, Snyk, Black Duck, Mend, Prisma Cloud, Aqua Security, or similar solutions.
• Strong understanding of SAST, DAST, IAST, Software Composition Analysis (SCA), API Security Testing, Container Security, and IaC Security.
• Experience implementing security controls within CI/CD platforms such as Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins, or Harness.
• Expertise securing cloud‑native applications across AWS, Azure, and GCP environments.
• Strong knowledge of API security, OAuth 2.0, OpenID Connect, JWT, microservices security, and Zero Trust principles.
• Experience securing Kubernetes, Docker containers, service meshes, and cloud‑native workloads.
• Hands‑on experience with penetration testing methodologies, vulnerability management programs, and remediation lifecycle management.
• Ability to define security policies, governance standards, risk acceptance processes, and security exception frameworks.
• Proven track record of influencing engineering leadership and driving security adoption across large enterprise environments.
• Strong leadership, stakeholder management, communication, mentoring, and presentation skills.
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.
• Certifications such as CISSP, CSSLP, CCSP, Azure Security Engineer, AWS Security Specialty, GWAPT, GWEB, or certified DevSecOps credentials are highly desirable.

Benefits

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company‑sponsored higher education and certifications
• Opportunity to work with cutting‑edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check‑ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility‑friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."

Security-Identity-Compliance - Microsoft Entra,CI CD