A Brief Overview

The Senior DevSecOps Engineer is a highly technical individual with a robust understanding of web application security and software development lifecycle (SDLC). Working closely with other members of the team and reporting directly to the Security Engineering Manager, you will assist in the day-to-day operation of the TriNets global app sec program. This will include (but is not limited to) developing new ways to detect and mitigate application security vulnerabilities through tooling and hands on testing. This position will also monitor, detect, response and lead any incident response related to application security. As a long-term goal, this position will analyze to discover anti-patterns within Trinet application ecosystem for making long lasting impact to how Trinet builds its software.

What you will do

- Assist in the day-to day operation of the organizations global app sec program.
- Develop secure software testing and validation procedures by fine tuning custom rules in SAST/DAST tooling
- Conduct security QA testing on high-risk product features (i.e. pen testing)
- Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) in conjunction with an application or system major change.
- Analysis to discover anti-patterns within the application ecosystem in support of strategic software goals.
- Provide support to dev teams in developing unit test cases that assures against business logic flaws and missing authorization checks.
- Performs other duties as assigned
- Complies with all policies and standards

Education Qualifications

- Bachelors Degree in Computer Science, Information Technology, Cybersecurity or a related field required

Experience Qualifications

- Typically 5+ years experience in a security or similar technical role required
- Experience with penetration testing, SAST/DAST tuning implementation, etc required

Skills and Abilities

- Skill in penetration testing principles, tools,



and techniques.
- Skill in building custom rules and implementing SAST/DAST tools
- Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
- Knowledge of Application Security Risks (e.g. Open Web Application Security Project Top 10 list)
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language (PL/SQL) and injections, race conditions, covert channel, replay, return-oriented attacks and malicious code)
- Knowledge of Personally Identifiable Information (PII) and Personal Health Information (PHI) data security standards.
- Knowledge of programming language structures and logic.
- Knowledge of Agile software development models
- Skill in secure test plan design (e. g. unit, integration, system, acceptance).
- Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, and non-repudiation)

Licenses and Certifications

- Certified Ethical Hacker (CEH) preferred or
- Offensive Security Certified Skilled (OSCP) preferred or
- GIAC Web Application Penetration Tester (GWAPT) or equivalent preferred

Travel Requirements

- Minimal

Work Environment

- Work in clean, pleasant, and comfortable office setting. The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable persons with disabilities to perform the essential functions.
- Work is 100% In-Office

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Senior Security Engineer (Vadali)
🏢 Trinet Group
📍 Vadali