Information Security Engineer

Role description
Job Description – Consultant, DevSecOps & Validation
Location: Bangalore
Department: Information Security Group (ISG)
Role: Consultant – DevSecOps & Validation
Experience: 2-5 Years
Employment Type: Full-Time
About the Role
We are looking for a skilled and motivated Consultant – DevSecOps & Validation to strengthen our Secure Software Development Lifecycle (SSDLC) and Vulnerability Management program. The candidate will work closely with development, cloud, infrastructure, and security teams to identify, assess, and remediate security vulnerabilities across applications, cloud platforms, and CI/CD environments.
Key Responsibilities
Implement and drive Secure SDLC and DevSecOps practices across the organization.
Build, review, and troubleshoot CI/CD pipelines using Jenkins, GitHub Actions, GitLab, and Azure DevOps.
Perform Vulnerability Assessment and Penetration Testing (VAPT) for web, mobile, API, cloud, and AI applications.
Integrate and manage security tools such as SAST, DAST, SCA, container scanning, and secret scanning.
Monitor organizational vulnerability posture and coordinate remediation with stakeholders.
Conduct security gap assessments and recommend security improvements.
Review security exceptions and ensure compliance with organizational security standards.
Stay updated on emerging cyber threats, vulnerabilities, and security best practices.
Required Skills
2-5 years of experience in Information Security, DevSecOps, or Application Security.
Strong understanding of:
OWASP Top 10
CVE/CVSS
OWASP ASVS
SANS Top 25
MITRE ATT&CK Framework
Cyber Kill Chain
Hands-on experience with:
SAST, DAST, SCA, IAST
Container Security & Vulnerability Management
CI/CD Security
Experience with security tools such as:
Qualys, Rapid7, Checkmarx, Veracode
Snyk, Black Duck, Trivy, Semgrep
OWASP ZAP, Burp Suite, GitGuardian
Nessus, Nmap, Wireshark, Metasploit, Kali Linux
Scripting and automation knowledge in:
Python
Shell Scripting
PowerShell
JavaScript
SQL
Preferred Qualifications
Engineering degree in Computer Science, Information Technology, Cyber Security, or related field.
Relevant certifications such as:
OSCP
CEH
eJPT
Security+
Key Competencies
Strong analytical and problem-solving skills.
Excellent communication and stakeholder management skills.
Self-driven, proactive, and detail-oriented.
Passion for cybersecurity and continuous learning.
If you are passionate about Application Security, DevSecOps, and Vulnerability Management, and want to work in a fast-paced security-driven environment, we would love to hear from you.

Work arrangement
Hybrid