App Sac Specialist

Wipro Technologies; West Windsor (NJ); On-site; USD 60,000 - 135,000; Full time

Benefits offered by this job

Medical and dental benefits

Competitive compensation

Job summary

Wipro Limited is seeking an experienced SAST Checkmarx Specialist to lead enterprise Application Security testing, including SAST, SCA, Secrets Detection, and DAST, with Checkmarx at architect level. The role requires ensuring secure SDLC adoption and CI/CD integration in Princeton, NJ.

The candidate will manage vulnerability remediation, SBOMs, and KPIs, collaborating with DevSecOps and platform engineering teams. Strong Checkmarx experience is mandatory for this onsite position.

Qualifications

• 10+ years of experience in Application Security, Secure SDLC, or DevSecOps.
• Hands-on experience operating enterprise AppSec scanning platforms and vulnerability management processes.
• Experience integrating security testing into CI/CD pipelines and cloud-native environments.
• Strong understanding of OWASP Top 10, secure coding practices, and software supply chain security.

Responsibilities

• Perform continuous and incremental application security testing using SAST, SCA, Secrets Detection, and DAST tools.
• Proficient in Checkmarx – architect level (Mandatory).
• Validate findings, eliminate false positives, and support remediation activities.
• Integrate security scanning into CI/CD pipelines and enforce secure development gates.
• Manage SBOM generation, open-source dependency risks, CVE tracking, and vulnerability exposure reporting.
• Track remediation SLAs, TTD/TTR metrics, and application security KPIs.
• Partner with development, DevSecOps, and platform engineering teams to drive remediation and continuous security improvements.
• Support security assessments, tool optimization, reporting, and developer enablement initiatives.
• Review the report before publishing and lead the report readout meetings with stakeholders.

Skills

Application Security

Secure SDLC

DevSecOps

CI/CD integration

Vulnerability management

Education

Bachelor's degree

Tools

Checkmarx

GitGuardian

GitHub Secret Scanning

Azure DevOps

GitHub Actions

Jenkins

GitLab CI/CD

Job description

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com.

Job Description:

Job Description

Title: SAST Checkmarx Specialist

Location: Princeton NJ

Duration: Full Time

Role Summary

Job Title: Application Security - Onsite

Role Summary

Lead the execution and optimization of enterprise Application Security testing services, including SAST, SCA, Secrets Detection, and DAST. Drive secure SDLC adoption through CI/CD integration, vulnerability validation, infrastructure vulnerability management, risk-based remediation tracking, SBOM management, and security metrics reporting. Checkmarx tool experience is Mandatory

Key Responsibilities

• Perform continuous and incremental application security testing using SAST, SCA, Secrets Detection, and DAST tools.
• Proficient in Checkmarx – architect level (Mandatory)
• Validate findings, eliminate false positives, and support vulnerability remediation activities.
• Integrate security scanning into CI/CD pipelines and enforce secure development gates.
• Manage SBOM generation, open-source dependency risks, CVE tracking, and vulnerability exposure reporting.
• Track remediation SLAs, TTD/TTR metrics, and application security KPIs.
• Partner with development, DevSecOps, and platform engineering teams to drive remediation and continuous security improvements.
• Support security assessments, tool optimization, reporting, and developer enablement initiatives.
• Review the report before publishing and lead the report readout meetings with the stakeholders
• Provide guidance and Technical governance to the team members

Experience

• 10+ years of experience in Application Security, Secure SDLC, or DevSecOps.
• Hands-on experience operating enterprise AppSec scanning platforms and vulnerability management processes.
• Experience integrating security testing into CI/CD pipelines and cloud-native environments.
• Strong understanding of OWASP Top 10, secure coding practices, and software supply chain security.

Technical Skills & Tool Experience

• SAST: Checkmarx.
• SCA & SBOM: Checkmarx
• DAST & API Security: Checkmarx
• Secrets Detection: GitGuardian/ GitHub Secret Scanning.
• DevSecOps: Azure DevOps/ GitHub Actions/ Jenkins/ GitLab CI/CD.
• Container & Cloud Security: Prisma Cloud/ Wiz/ Aqua/ Microsoft Defender for Cloud.
• Reporting & ITSM: ServiceNow/ Power BI/ Grafana

Preferred Certifications

• CEH/Security+/Certified DevSecOps Professional/AWS/Azure Security Specialty

Areas of responsibility

Monitoring and Incident Detection-Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards.

Incident Handling and Analysis-Perform root cause analysis, create incident response plans and implement disaster recovery measures to minimize business disruption

Threat Assessment and Analytics-Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.

Stakeholder Coordination and Audit Assistance-"Liaise with cross functional teams, external vendors and auditors to ensure compliance with security frameworks.

Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance."

Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.

Mandatory Skills

Application Security Code Review - SAC.Experience: 5-8 Years. The expected compensation for this role ranges from $60,000 to $135,000 .Final compensation will depend on various factors, including your geographical location, minimum wage obligations, skills, and relevant experience. Based on the position, the role is also eligible for Wipro's standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options.Applicants are advised that employment in some roles may be conditioned on successful completion of a post-offer drug screening, subject to applicable state law.

Wipro provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Applications from veterans and people with disabilities are explicitly welcome.

Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, caste, creed, religion, gender, marital status, age, ethnic and national origin, gender identity, gender expression, sexual orientation, political orientation, disability status, protected veteran status, or any other characteristic protected by law.

Wipro is committed to creating an accessible, supportive, and inclusive workplace. Reasonable accommodation will be provided to all applicants including persons with disabilities, throughout the recruitment and selection process. Accommodations must be communicated in advance of the application, where possible, and will be reviewed on an individual basis. Wipro provides equal opportunities to all and values diversity.