Software Engineer - Associate - DevSecOps

Experience: Not Available to Not Available years

Location: Pune, Maharashtra, India

Skills: Python, SAST, SCA, CI/CD, AWS, Docker, Kubernetes, API security, Coverity, SonarQube, Black Duck, SALT Security, Jenkins

Company Overview
Siemens Digital Industries Software is a leading provider of solutions for the design, simulation, and manufacture of products across many different industries. Formula 1 cars, skyscrapers, ships, space exploration vehicles, and many of the objects we see in our daily lives are being conceived and manufactured using our Product Lifecycle Management (PLM) software.
The DevSecOps / Application Security Engineer is responsible for embedding security controls across the software development lifecycle (SDLC). The role focuses on automation, application and API security, open‑source risk management, CI/CD security, cloud and container security, aligned with Siemens Digital Industries Software security standards.

Key Responsibilities
Develop Python automation scripts for security testing, tool integration, and CI/CD workflows.
Implement and manage Static Code Analysis (SAST) using tools such as Coverity and SonarQube.
Perform Software Composition Analysis (SCA) including SBOM generation and binary analysis (e.g., Black Duck).
Support API security assessment and monitoring using tools such as SALT Security.
Secure CI/CD pipelines (Jenkins, Git-based CI/CD) by implementing security gates and policy checks.
Embed DevSecOps practices into build and deployment pipelines (shift-left security).
Apply AWS security best practices, including VPCs, Security Groups, IAM policies, S3, and traffic controls.
Support container and orchestration security for Docker and Kubernetes environments.




Demonstrate foundational understanding of AI concepts, including AI agents and MCP server interactions.

Required Skills & Qualifications
Strong proficiency in Python automation and scripting
Hands-on experience with SAST, SCA, and CI/CD security
Working knowledge of AWS services and cloud security
Understanding of DevSecOps and secure SDLC practices
Basic experience with Docker and Kubernetes
Familiarity with API security concepts and risks

Preferred Skills
Experience in enterprise or product-based software environments
Exposure to OWASP, secure coding standards, and security frameworks
Awareness of AI security or emerging technology risks

We are Siemens
A collection of over 377,000 minds building the future, one day at a time in over 200 countries. We're dedicated to equality, and we welcome applications that reflect the diversity of the communities we work in. All employment decisions at Siemens are based on qualifications, merit, and business need. Bring your curiosity and creativity and help us shape tomorrow! We offer a comprehensive reward package which includes a competitive basic salary, bonus scheme, generous holiday allowance, pension, and private healthcare.
Siemens Software.
Transform the Everyday with Us
Please note that, due to the current integration framework, this chance is currently available exclusively to employees of Altair and DISW. While there is a possibility that the position may be made available to all Siemens employees through a future external posting, this is not guaranteed. We appreciate your understanding and cooperation during this transitional period. This communication does not constitute a promise or guarantee of future employment opportunities beyond the current scope.
#LI-PLM
#LI-Hybrid

📌 Software Engineer Associate DevSecOps (Pune)
🏢 Siemens
📍 Pune