Role Summary

Lead Application Security and Security Automation initiatives by integrating security into SDLC and CI/CD pipelines, driving DevSecOps transformation, and developing scalable automation solutions using Python, Azure, APIs, GitHub, and ServiceNow.
Application Security Governance
Serve as the primary Application Security lead and trusted advisor.
Establish and mature Secure SDLC and DevSecOps practices.
Integrate security controls and gates into CI/CD pipelines.
Manage and optimize security tools like SAST, DAST, SCA, Secret Detection, etc.
Assess third-party components, open-source libraries, and APIs for security risks.
Partner with development, architecture, and cybersecurity teams to embed security into the development lifecycle.
Security Automation Engineering
Design and develop security automation solutions using Python and Azure.
Build integrations across GitHub, ServiceNow, security tools, and enterprise platforms.
Automate vulnerability management, reporting, compliance, and remediation workflows.




Develop and maintain API-based integrations and cloud-native automation solutions.
Leadership Training
Conduct secure coding and OWASP awareness sessions.
Mentor engineers on Application Security and automation best practices.
Lead cross-functional security and automation initiatives.
Required Qualifications
Technical Skills
10+ years in Application Security, Security Engineering, Automation, or related roles.
Solid expertise in OWASP Top 10, CWE, CVE, Secure SDLC, and DevSecOps.
Expert-level Python development and automation skills.
Hands-on experience with Microsoft Azure, REST APIs, GitHub, and ServiceNow.
Experience with Application Security tools including SAST, DAST, SCA, and vulnerability management platforms.
Knowledge of CI/CD platforms such as Azure DevOps, GitHub Actions, GitLab, or Jenkins.
Proficiency in one or more programming languages (Python, Java, .NET, Node.js, etc.).
Preferred Qualifications

📌 Sr Lead, Cyber Sec Eng Pune
🏢 Northern Trust
📍 Pune