Job Summary

As discussed today, we have requirement for one of our client, for Pune location on Appsec Secrets Management professional.

Experience

Experience: 4-5 years of experience in Application Security, SSDLC, Governance, or similar roles.

Qualifications

- Bachelors Degree in IT, Engineering, or a related field.

Must-Have Skills

- Robust understanding of secrets exposure risks (API keys, tokens, passwords, certificates).
- Experience reviewing secrets scanning outputs and validating remediation actions.
- Working knowledge of SAST concepts and governance workflows.
- Familiarity with GitHub and CI/CD environments.
- Strong documentation, coordination, and communication skills.

Nice-to-Have Skills

- Exposure to Checkmarx tools.
- Familiarity with enterprise tracking tools (e.g., ServiceNow).
- Familiarity with Security Governance.

Tasks & Responsibilities

- Govern and track Secrets findings across repositories, ensuring remediation within defined SLAs.
- Coordinate with development, platform, risk, and compliance teams on remediation, exceptions, deferrals, and risk acceptances.
- Maintain governance artefacts, audit-ready documentation, metrics, dashboards, and executive reporting.
- Monitor remediation progress, identify overdue items, and drive stakeholder escalations as required.
- Act as the primary point of contact for developer and stakeholder queries, providing guidance on findings, remediation, and governance processes.




- Analyze findings from approved security tools, validate closure evidence, review false positives, and support process improvements.
- Deliver weekly/monthly governance reports covering remediation trends, ageing findings, exceptions, and overall risk posture.
- Work on tuning the secret scanning rule sets for reducing noise due to false positives.

What we look for

People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful, and able to sustain positive energy, while being adaptable and creative in their approach.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying. Role: Sr. Consultant, Industry Type: Accounting / Auditing, Department: Consulting, Employment Type: Full Time, Permanent Role Category: Management Consulting Education UG: Any Graduate PG: CA in CA read more

Key Skills AssurancegithubPLAClient servicingFocusShapingAgileManager TechnologyAuditingInvestment

📌 Consultant/Senior Consultant- SAST App Sec Secret Managemet in Pune (Mumbai)
🏢 EY
📍 Mumbai