Application Security DevSecOps Specialist

NTT DATA Europe & Latam; Emilia-Romagna; In loco; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

NTT DATA Europe & Latam is seeking a skilled Security Testing Engineer in Emilia-Romagna to help secure software delivery across our CI/CD pipelines. You will implement security measures, run SAST/DAST, conduct software composition analysis, and review code for vulnerabilities to prevent security gaps.

The ideal candidate has 3–5 years of experience with security testing tools and automation, knowledge of DevSecOps, OWASP/CIS benchmarks, and excellent English communication.

Competenze

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3–5 years of experience in security testing tools and automation.
• Knowledge of DevSecOps practices and CI/CD pipeline integration.
• Familiarity with industry standards like OWASP, CIS Benchmarks, and secure coding guidelines.
• Strong collaboration and communication skills for working with developers and stakeholders.
• Excellent command of both spoken and written English.

Mansioni

• Implement security measures within CI/CD pipelines to ensure secure software delivery.
• Use SAST/DAST tools for analysing source code or binaries and identify vulnerabilities.
• Perform Software Composition Analysis (SCA) to detect vulnerabilities in open-source libraries and third-party components.
• Conduct code security reviews and triage security findings.
• Collaborate with developers to fix identified vulnerabilities and ensure secure coding practices.
• Manage security testing automation processes and integrate tools with CMDB and ticketing systems.
• Provide clear, actionable communication of findings and remediation recommendations to stakeholders.

Conoscenze

SAST

DAST

CI/CD security

SCA tools

API security

Vulnerability triage

Communication skills

Formazione

Bachelor's degree in Computer Science or related field

Descrizione del lavoro

Who We Are

NTT DATA is one of the world's largest global security service providers, partnering with some of the most recognized security technology brands. We're looking for passionate, curious, and motivated individuals to join our team.

Who We Are

NTT DATA is one of the world's largest global security service providers, partnering with some of the most recognized security technology brands. We're looking for passionate, curious, and motivated individuals to join our team.

What You'll Be Doing

• Implement security measures within CI/CD pipelines to ensure secure software delivery.


• Static Application Security Testing (SAST) tools for analysing source code or binaries.


• Dynamic Application Security Testing (DAST) tools for identifying vulnerabilities in running applications.


• Software Composition Analysis (SCA) tools to detect vulnerabilities in open-source libraries and third-party components.


• Secret scanning to prevent accidental inclusion of sensitive information like API keys or passwords.


• Container scanning to analyse container images and runtime environments for vulnerabilities and misconfigurations.


• Conduct code security reviews and triage security findings.


• Collaborate with developers to fix identified vulnerabilities and ensure secure coding practices.


• Perform API security testing for standalone APIs not integrated within applications.


• Manage security testing automation processes.


• Integrate security testing tools with organizational systems such as CMDB, ticketing systems, and reporting platforms.


• Maintain tool certifications and stay updated with the latest capabilities and advancements.


• Provide clear and actionable communication of findings to enable informed, prioritised actions.


• Deliver detailed assessment reports with remediation recommendations aligned to risk severity.


• Present findings to both technical and non-technical stakeholders, including executive leadership.


• Maintain comprehensive documentation of security assessments, findings, and remediation tracking.


• Work closely with development teams to integrate security seamlessly into their workflows.


• Train developers on secure coding practices and the use of security tools.


• Evaluate and implement AI-powered application security testing tools, ensuring validation of AI-generated findings by human experts.


• Maintain awareness of AI-powered tools' limitations and compliance requirements.


• Enhance the speed and reliability of secure code delivery.


• Reduce vulnerabilities and improve the overall security posture of applications.


• Ensure compliance with industry standards such as OWASP Top 10, CIS Benchmarks, and secure coding practices.


• Work closely with Security Design Engineers to implement designs within frameworks defined by Security Architects.

What You'll Bring Along

• Bachelor's degree in Computer Science, Information Technology, or a related field.


• Minimum 3 – 5 years of experience in security testing tools and automation.


• Knowledge of DevSecOps practices and CI/CD pipeline integration.


• Familiarity with industry standards like OWASP, CIS Benchmarks, and secure coding guidelines.


• Strong collaboration and communication skills for working with developers and stakeholders.


• Excellent command of both spoken and written English