- Minimum 5+ years of hands-on experience in Application Security, DevSecOps, and Secure SDLC initiatives.
- Strong experience in implementing and managing Static Application Security Testing (SAST) solutions across enterprise environments.
- Hands-on experience with at least one SAST tool such as Checkmarx, Snyk, SonarQube, Fortify SCA, or Aqua Security.
- Experience integrating SAST solutions into CI/CD pipelines and automating security controls within development workflows.
- Strong hands-on experience with GitHub Actions workflow development, configuration, and troubleshooting.
- Experience with pipeline configuration, automation, and security integration using GitHub, Azure DevOps, GitLab, and Jenkins.
- Proficiency in scripting languages such as Python or Bash for security automation and process optimization.
- Development experience in at least one programming language such as Python, Java, C, or C#.
- Experience working with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform (GCP).
- Knowledge of secure coding practices, vulnerability management, and application security best practices.
- Strong understanding of OWASP Top 10, secure development methodologies, and risk-based remediation.
- Experience performing Application Security Assessments, vulnerability analysis, and remediation validation.
- Ability to analyze security findings, provide remediation guidance, and work closely with development teams to address risks.
- Experience working within Agile, DevOps, and cloud-native development environments.

Responsibilities

- Minimum 5+ years of hands-on experience in Application Security, DevSecOps, and Secure SDLC initiatives.




- Strong experience in implementing and managing Static Application Security Testing (SAST) solutions across enterprise environments.
- Hands-on experience with at least one SAST tool such as Checkmarx, Snyk, SonarQube, Fortify SCA, or Aqua Security.
- Experience integrating SAST solutions into CI/CD pipelines and automating security controls within development workflows.
- Strong hands-on experience with GitHub Actions workflow development, configuration, and troubleshooting.
- Experience with pipeline configuration, automation, and security integration using GitHub, Azure DevOps, GitLab, and Jenkins.
- Proficiency in scripting languages such as Python or Bash for security automation and process optimization.
- Development experience in at least one programming language such as Python, Java, C, or C#.
- Experience working with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform (GCP).
- Knowledge of secure coding practices, vulnerability management, and application security best practices.
- Strong understanding of OWASP Top 10, secure development methodologies, and risk-based remediation.
- Experience performing Application Security Assessments, vulnerability analysis, and remediation validation.
- Ability to analyze security findings, provide remediation guidance, and work closely with development teams to address risks.
- Experience working within Agile, DevOps, and cloud-native development environments.

Qualifications

Prior Experience

The candidate must have 4 to 8 years of relevant experience in a similar role, preferably in a qualified services organization.

📌 SAST Associate Consultant_MAST (Bengaluru)
🏢 KPMG India
📍 Bengaluru