Senior Consultant (Application Security testing - SAST and SCA)

Wipro Technologies; Chennai District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Wipro Limited in India seeks a Senior Consultant to lead Application Security testing focusing on SAST and SCA. You will work in GCISO unit delivering secure coding guidance and integrate security checks into CI/CD pipelines.

The ideal candidate has 6–8 years of hands-on experience with Fortify, Checkmarx, Veracode, and SCA tools, plus strong communication skills to train development teams and promote secure coding practices across projects.

Qualifications

• Bachelor’s degree in a technical field.
• 6–8 years of experience in application security / SAST / SCA.
• Hands-on experience in SAST tools (Fortify, Checkmarx, Veracode) and SCA tools (Sonatype, Black Duck, Snyk).
• Good understanding of secure coding practices and OWASP Top 10.
• Ability to analyse code and identify vulnerabilities.
• Experience in scan configuration, tuning, and false positive reduction.
• Familiarity with CI/CD pipelines and DevSecOps.
• Good communication skills with ability to deliver developer trainings.
• Preferred: Prior development experience in any coding language.

Responsibilities

• Perform SAST across applications (Java, .NET, Node, Angular).
• Perform SCA to identify vulnerable open-source components and license risks.
• Configure, execute, and optimize SAST/SCA scans; validate findings and remove false positives.
• Analyse code-level vulnerabilities and provide remediation guidance to developers.
• Support integration of SAST/SCA into CI/CD pipelines with DevOps engineering team.
• Track vulnerabilities through closure and support remediation.
• Deliver secure coding awareness/training sessions to development teams.
• Must be well versed with alternative secure coding approaches to mitigate vulnerabilities across technologies.

Skills

SAST

SCA

DevSecOps

CI/CD

Training delivery

Education

Bachelor's degree in a technical field

Tools

Fortify

Checkmarx

Veracode

Sonatype

Black Duck

Snyk

Job description

Job Title: Senior Consultant (Application Security testing - SAST and SCA)

Posting Start Date: 8/28/26

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com.

Job Description

Profile: Technical Lead (Application Security testing – SAST and SCA)

Location: No location constraints (but preference to Pune/Mumbai)

Band: B3

Experience: 6–8 years

About the role:

We are looking to onboard a Senior Consultant (Application Security testing - SAST and SCA) for GCISO unit.

R͏oles & Responsibilities

• Perform Static Application Security Testing (SAST) across applications (Java, .NET, Node, Angular etc.)
• Perform Software Composition Analysis (SCA) to identify vulnerable open-source components and license risks
• Configure, execute, and optimize SAST/SCA scans; validate findings and remove false positives
• Analyse code-level vulnerabilities and provide clear remediation guidance to developers
• Support integration of SAST/SCA into CI/CD pipelines (DevSecOps) working with DevOps engineering team
• Track vulnerabilities through closure and support remediation
• Deliver secure coding awareness/training sessions to development teams
• Must be well versed with alternative secure coding approaches to mitigate the vulnerabilities across different technologies.

Q͏ualifications

• Bachelor’s degree in a technical field
• 6–8 years of experience in application security / SAST / SCA
• Strong hands‑on experience in SAST tools (e.g., Fortify, Checkmarx, Veracode) and SCA tools (e.g., Sonatype, Black Duck, Snyk)
• Good understanding of secure coding practices and OWASP Top 10
• Ability to analyse code (Java, .NET, JavaScript, etc.) and identify vulnerabilities
• Experience in scan configuration, tuning, and false positive reduction
• Familiarity with CI/CD pipelines and DevSecOps
• Good communication skills with ability to deliver developer trainings
• Preferred: Prior development experience in any coding language

Good to have Certifications:

• CEH, GPEN, CISSP, or similar

Reinvent your world.We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions.

Applications from people with disabilities are explicitly welcome.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, caste, creed, religion, gender, marital status, age, ethnic and national origin, gender identity, gender expression, sexual orientation, political orientation, disability status, protected veteran status, or any other characteristic protected by law.

Wipro is committed to creating an accessible, supportive, and inclusive workplace. Reasonable accommodation will be provided to all applicants including persons with disabilities, throughout the recruitment and selection process. Accommodations must be communicated in advance of the application, where possible, and will be reviewed on an individual basis. Wipro provides equal opportunities to all and values diversity.