Job Description
Roles and Responsibilities
• Implementation of secure coding practices and automation and integration of the DevSecOps processes
• Automate and integrate application and system cybersecurity controls as tollgates into development lifecycle
• Apply the best practices of secure development for cloud technology, internet servers, virtualized containers and orchestration, web-enabled database applications and databases etc.
• Understand various DevOps models and how-to plug-in security and compliance with minimal disruption
• CI/CD integration of SAST tools (Fortify SCA, Checkmarx, Veracode etc.), DAST tools (WebInspect, Appscan etc.) and Vulnerability Management tools (Qualys, Risksense etc.) ensuring seamless integration with the existing build and operations processes
• Implementation of threat modeling processes and tools in conjunction with development teams
• Perform vulnerability assessments & penetration testing of web & mobile applications
Education
• Bachelor's degree in Computer Science, Computer Engineering, technology-related field, or equivalent work experience
Work experience
• Minimum of 3 years of combined experience in software engineering and DevSecOps in an information security context
Skills/abilities
• Ability to integrate and automate security and compliance controls in Azure DevOps
• Familiarity with Kubernetes orchestration
• Experience with Azure AD and other IDAM technologies
• Excellent written and verbal communication skills
• Knowledge of key cybersecurity technologies such as application security design principles, authentication and authorization models, secure coding, penetration testing.
Location
PwC Office location- PAN India, Mumbai preferred
Vacancy
1 (Sr. Associate)
Experience
3-7 years
• Implementation of secure coding practices and automation and integration of the DevSecOps processes
• Automate and integrate application and system cybersecurity controls as tollgates into development lifecycle
• Apply the best practices of secure development for cloud technology, internet servers, virtualized containers and orchestration, web-enabled database applications and databases etc.
• Understand various DevOps models and how-to plug-in security and compliance with minimal disruption
• CI/CD integration of SAST tools (Fortify SCA, Checkmarx, Veracode etc.), DAST tools (WebInspect, Appscan etc.) and Vulnerability Management tools (Qualys, Risksense etc.) ensuring seamless integration with the existing build and operations processes
• Implementation of threat modeling processes and tools in conjunction with development teams
• Perform vulnerability assessments & penetration testing of web & mobile applications
Education
• Bachelor's degree in Computer Science, Computer Engineering, technology-related field, or equivalent work experience
Work experience
• Minimum of 3 years of combined experience in software engineering and DevSecOps in an information security context
Skills/abilities
• Ability to integrate and automate security and compliance controls in Azure DevOps
• Familiarity with Kubernetes orchestration
• Experience with Azure AD and other IDAM technologies
• Excellent written and verbal communication skills
• Knowledge of key cybersecurity technologies such as application security design principles, authentication and authorization models, secure coding, penetration testing.
Location
PwC Office location- PAN India, Mumbai preferred
Vacancy
1 (Sr. Associate)
Experience
3-7 years
💡 Quick Summary
Seeking a career-building opportunity? The DevSecOps Engineer | PwC position is now open for candidates interested in the Software Developer Jobs sector. This role in Mumbai offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in Software Developer Jobs is a plus.