Tools SME

Capgemini Engineering; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Learning platform access

Belonging culture

Cutting-edge projects

Renewable campuses

Job summary

Capgemini Engineering in Mumbai seeks an experienced security tooling engineer to manage and optimize SAST, DAST, and SCA platforms. You will install, configure, and maintain tools, develop SOPs, and monitor performance with OEM support coordination.

The role requires 3.5–6 years of hands-on experience dealing with Checkmarx, Fortify, AppScan, and Burp Suite, plus CI/CD and DevSecOps familiarity for agile delivery.

Qualifications

• 3.5 to 6 years of experience in application security tool administration, support, or platform engineering.
• Hands-on experience with security tools such as Checkmarx, Fortify, AppScan, Burp Suite, or similar platforms.
• Strong understanding of SAST, DAST, and SCA technologies.
• Experience in tool installation, configuration, upgrades, troubleshooting, and maintenance.
• Knowledge of monitoring, performance tuning, capacity management, and operational support.
• Understanding of CI/CD pipelines, automation, and DevSecOps practices.
• Experience in creating and maintaining technical documentation, SOPs, and knowledge articles.
• Strong analytical, problem-solving, communication, and stakeholder management skills.

Responsibilities

• Manage and administer application security tools including SAST, DAST, SCA, and related platforms.
• Perform tool installation, configuration, upgrades, patching, and OEM-recommended housekeeping activities.
• Develop, maintain, and execute SOPs for tool operations and maintenance.
• Monitor tool health, performance, availability, and capacity using enterprise monitoring solutions.
• Perform policy tuning, benchmarking, and optimization to improve scan efficiency and reduce false positives.
• Troubleshoot tool-related issues and coordinate with OEM/vendor support teams for timely resolution.
• Maintain operational documentation, knowledge articles, and configuration artifacts.
• Support CI/CD integration, automation initiatives, and DevSecOps practices.
• Ensure compliance with organizational security, governance, and operational standards.

Skills

Security tooling expertise

CI/CD & DevSecOps

Analytical skills

Stakeholder communication

Tools

Checkmarx

Fortify

AppScan

Burp Suite

Job description

• Manage and administer application security tools including SAST, DAST, SCA, and related platforms.
• Perform tool installation, configuration, upgrades, patching, and OEM-recommended housekeeping activities.
• Develop, maintain, and execute SOPs for tool operations and maintenance.
• Monitor tool health, performance, availability, and capacity using enterprise monitoring solutions.
• Perform policy tuning, benchmarking, and optimization to improve scan efficiency and reduce false positives.
• Troubleshoot tool-related issues and coordinate with OEM/vendor support teams for timely resolution.
• Maintain operational documentation, knowledge articles, and configuration artifacts.
• Support CI/CD integration, automation initiatives, and DevSecOps practices.
• Ensure compliance with organizational security, governance, and operational standards.

Your Role:

• Manage and administer application security tools including SAST, DAST, SCA, and related platforms.
• Perform tool installation, configuration, upgrades, patching, and OEM-recommended housekeeping activities.
• Develop, maintain, and execute SOPs for tool operations and maintenance.
• Monitor tool health, performance, availability, and capacity using enterprise monitoring solutions.
• Perform policy tuning, benchmarking, and optimization to improve scan efficiency and reduce false positives.
• Troubleshoot tool-related issues and coordinate with OEM/vendor support teams for timely resolution.
• Maintain operational documentation, knowledge articles, and configuration artifacts.
• Support CI/CD integration, automation initiatives, and DevSecOps practices.
• Ensure compliance with organizational security, governance, and operational standards.

Your Profile:

• 3.5 to 6 years of experience in application security tool administration, support, or platform engineering.
• Hands-on experience with security tools such as Checkmarx, Fortify, AppScan, Burp Suite, or similar platforms.
• Strong understanding of SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), and SCA (Software Composition Analysis) technologies.
• Experience in tool installation, configuration, upgrades, troubleshooting, and maintenance.
• Knowledge of monitoring, performance tuning, capacity management, and operational support.
• Understanding of CI/CD pipelines, automation, and DevSecOps practices.
• Experience in creating and maintaining technical documentation, SOPs, and knowledge articles.
• Strong analytical, problem-solving, communication, and stakeholder management skills.

What will you love working at Capgemini:

• You will have the opportunity to learn on one of the industry's largest digital learning platforms, with access to 250,000+ courses and numerous certifications.
• We’re committed to ensure that people of all backgrounds feel encouraged and have a sense of belonging at Capgemini. You are valued for who you are, and you can bring your original self to work.
• At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.
• Capgemini office campuses in India are green and run on 100% renewable electricity. We have installed Solar plants across India locations and ‘Battery Energy Storage Solution’ (BESS) in the Noida and Mumbai campuses. You will have chance to make a difference everyday.