Key Responsibilities
- Secure and maintain microservice applications and CI/CD pipelines.
- Implement DevSecOps strategies in ongoing and current projects.
- Develop and apply security controls to strengthen pipelines and application posture.
- Conduct threat modeling and security design reviews for new projects.
- Collaborate with developers to remediate vulnerabilities in applications.
- Monitor security events using SIEM tools such as Grafana, Loki, and Azure Sentinel.
- Investigate and respond to security incidents, conduct root cause analysis, and implement preventive actions.
- Maintain incident response playbooks and security documentation.
- Establish secure coding standards and deliver developer training.
- Integrate security gates into deployment pipelines (Dev → Non-Prod → Prod).

Requirements
- Deep understanding of OWASP Top 10 vulnerabilities and mitigation techniques.
- Working knowledge of security frameworks like NIST, CIS Benchmarks, and MITRE ATT&CK.;
- Proficiency in the Secure Software Development Lifecycle (SSDLC).
- Experience with cloud IAM, VPNs,



network security, and encryption standards.
- Hands-on experience with container security (Docker, Kubernetes) and IaC security (Terraform, ARM templates).
- Ability to read and review Java code for vulnerabilities.
- Strong understanding of API security (OAuth 2.0, JWT, SAML, OpenID Connect).
- Familiarity with Spring Boot security, CI/CD security, and GitHub Actions.
- Experience integrating SAST, DAST, and dependency scanning into pipelines.
- Hands-on use of security testing tools (Burp Suite, OWASP ZAP, Nmap, Wireshark).
- Proficiency in Python, Bash, or PowerShell scripting.
- Ability to communicate technical risks effectively to non-technical stakeholders.

Preferred Qualifications
- Security certifications: CISSP, CEH, OSCP, Azure Security Engineer Associate.
- Experience in regulated industries like finance or insurance.
- Understanding of data privacy regulations and PII/PHI handling.
- Backgro

📌 Software Engineer III (Chennai)
🏢 LexisNexis Risk Solutions
📍 Chennai