Job Description
Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you.
Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees.

- Jobseeker Video Testimonials

- Employee Glassdoor Reviews

If you are a Dev SecOps Engineer (SAST/DAST) looking for excitement, challenge and stability in your work, then you would be glad to come across this page.

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.

Check if you are up for maximising your earning/growth potential, leveraging our Disruptive Talent Solution.
Role: Dev SecOps Engineer (SAST/DAST)
Location: Hyderabad
Experience: 3-8 YearsWork Mode: Hybrid
Type: Contract to Hire
Notice Period: Immediate Joiners
Requirements

We are looking for an experienced Dev SecOps Engineer with strong expertise in SAST, DAST, and Penetration Testing to strengthen application security across the software development lifecycle. The ideal candidate will have hands-on experience integrating security testing into CI/CD pipelines, identifying application vulnerabilities, and working closely with development and Dev Ops teams to remediate security findings.

The candidate should have a strong understanding of application security, Dev SecOps practices, vulnerability management, and security automation.

Key Responsibilities





- Implement and manage SAST and DAST security testing across applications and CI/CD pipelines.

- Integrate application security tools into Dev Ops/CI-CD pipelines and automate security testing.

- Perform and support application penetration testing to identify security vulnerabilities.

- Analyze SAST/DAST and penetration testing results and validate security findings.

- Work with development teams to understand, prioritize, and remediate identified vulnerabilities.

- Conduct vulnerability assessment and provide recommendations for effective remediation.

- Develop and maintain security gates and policies within CI/CD pipelines.

- Collaborate with Dev Ops, developers, architects, and security teams to embed security throughout the SDLC.

- Track vulnerabilities through remediation and perform retesting/validation.

- Help reduce false positives and improve the quality of automated security scans.

- Prepare security assessment reports, dashboards, and management-level summaries.

- Support continuous improvement of Dev SecOps processes, security automation, and application security controls.

- Stay current with emerging application security threats, vulnerabilities, and industry best practices.

Required Skills
Application Security





- Strong understanding of Application Security and Secure SDLC.

- Hands-on experience with SAST and DAST methodologies.

- Experience in Web Application Security and API Security.

- Valuable knowledge of common vulnerabilities including OWASP Top 10.

- Understanding of vulnerability severity, risk assessment, and remediation.

SAST / DAST Tools

Experience with one or more application security tools such as:

- Sonar Qube

- Checkmarx

- Fortify

- Veracode

- Snyk

- Git Lab SAST/DAST

- Burp Suite

- OWASP ZAP

- Similar SAST/DAST and application security tools.

Dev SecOps / CI-CD

- Hands-on experience with CI/CD pipelines.

- Good understanding of Jenkins, Git Lab CI/CD, Azure Dev Ops, Git Hub Actions, or similar tools.

- Experience integrating security scanning into automated build and deployment pipelines.

- Understanding of Docker/Kubernetes and cloud environments is an advantage.

- Experience with scripting/automation using Python, Power Shell, or Shell scripting is preferred.

Penetration Testing

- Knowledge of Web Application and API Penetration Testing.

- Ability to identify and validate common security vulnerabilities.

- Familiarity with tools such as Burp Suite, OWASP ZAP, Nmap, and similar security testing tools.

- Understanding of authentication, authorization, session management, input validation, and API security.

Requirements
Azure Cloud Security Ops (Perimeter, Endpoint, Vulnerability Management, Email Security, CSPM, Key Management)

📌 DevSecOps Engineer (SAST/DAST) (India)
🏢 Alignity Solutions
📍 India