Sr. DevSecOps Security Engineer(Immediate Joiners Only)

Atos; Bengaluru; Hybrid; INR 1.200.000 - 2.000.000; Vollzeit

Zusammenfassung

Atos in Bengaluru seeks a Sr. DevSecOps Engineer to lead security testing across web apps and APIs. You will embed cybersecurity into sprint cycles, review SAST/DAST results, and strengthen CI/CD pipelines.

The role requires 5–7 years in application security and hands-on expertise with SAST, DAST, fuzzing, SCA, and OWASP Top 10. Collaboration with Dev, QA, DevOps and architecture teams is essential.

Qualifikationen

• 5-7 years in Application Security Testing and DevSecOps.
• Experience in SAST/DAST, fuzzing, SCA and CI/CD security.
• Familiar with OWASP Top 10 and API security.

Aufgaben

• Lead and execute DevSecOps operations and cybersecurity testing for web applications and APIs.
• Perform and review SAST, including detailed source code review.
• Conduct Dynamic Application Security Testing (DAST) across development and pre-production environments.
• Design and execute fuzzing activities for applications and APIs.
• Perform Software Composition Analysis (SCA) to identify vulnerable open-source dependencies and third-party components.
• Assess and test CI/CD pipelines for security gaps, misconfigurations, and privilege escalation opportunities.
• Conduct software supply chain security testing and identify risks in build, artifact, and deployment processes.
• Drive security testing before the Quality Assurance (QA) phase to enable shift-left security practices.
• Define and implement security testing practices across the SDLC.
• Work closely with development, QA, DevOps, and architecture teams to embed cybersecurity testing into sprint cycles.
• Identify security test scenarios during sprint planning.
• Create, maintain, and automate security test cases.
• Execute and validate security test cases across Dev, UAT, and Production promotion stages.
• Review and validate remediation activities and provide risk-based recommendations.
• Mentor junior engineers, review their reports and contribute to security best practices, standards, and governance.

Kenntnisse

DevSecOps

Application Security

Web Security

SAST

DAST

Fuzzing

SCA

CI/CD Security

Supply Chain Security

OWASP Top 10

Tools

JFrog

SonarQube

Burp Suite

Nessus

XRAY

JIRA

Threat Modeling Tool

Postman

Microsoft Threat Modeling Tool

Jobbeschreibung

We have an excellent opportunity for Sr. DevSecOps Engineer role in Bengaluru.

Role & responsibilities

• Lead and execute DevSecOps operations and cybersecurity testing for web applications and APIs.
• Perform and review Static Application Security Testing (SAST), including detailed source code review.
• Conduct Dynamic Application Security Testing (DAST) across development and pre-production environments.
• Design and execute fuzzing activities for applications and APIs.
• Perform Software Composition Analysis (SCA) to identify vulnerable open-source dependencies and third-party components.
• Assess and test CI/CD pipelines for security gaps, misconfigurations, and privilege escalation opportunities.
• Conduct software supply chain security testing and identify risks in build, artifact, and deployment processes.
• Drive security testing before the Quality Assurance (QA) phase to enable shift-left security practices.
• Define and implement security testing practices across the SDLC.
• Work closely with development, QA, DevOps, and architecture teams to embed cybersecurity testing into sprint cycles.
• Identify security test scenarios during sprint planning.
• Create, maintain, and automate security test cases.
• Execute and validate security test cases across Dev, UAT, and Production promotion stages.
• Review and validate remediation activities and provide risk-based recommendations.
• Mentor junior engineers, review their reports and contribute to security best practices, standards, and governance.

Required Skills and Experience

• 5-7 years of experience in Application Security Testing, DevSecOps.
• Strong hands-on experience in web application security testing and API security testing.
• Proven experience in:
• SAST (secure code review)
• DAST
• Fuzzing
• Software Composition Analysis (SCA)
• CI/CD pipeline security Testing
• Software supply chain security testing
• Strong understanding of SDLC, secure coding practices, and shift-left security.
• Experience creating and automating security test cases in agile/sprint-based environments.
• Familiarity with OWASP Top 10, API Security Top 10, and common application security vulnerabilities.
• Experience working with development, DevOps, QA, and product teams.
• Strong analytical, communication, and stakeholder management skills.

Tools Knowledge

• JFrog
• SonarQube
• Burp Suite
• Nessus
• XRAY
• JIRA
• Microsoft Threat Modeling Tool
• Postman

Preferred Qualifications

• Experience with cloud platforms such as AWS, Azure, or GCP.
• Knowledge of container security, Kubernetes security, and Infrastructure-as-Code security.
• Experience integrating security tools into CI/CD pipelines.
• Relevant certifications such as CISSP, CSSLP, GWAPT, or DevSecOps-related certifications
• US customer timings. 2:30 PM-11:30 PM IST