SAST Associate Consultant_MAST Minimum 5+ years of hands-on experience in Application Security, DevSecOps, and Secure SDLC initiatives. Strong experience in implementing and managing Static Application Security Testing (SAST) solutions across enterprise environments. Hands-on experience with at least one SAST tool such as Checkmarx, Snyk, SonarQube, Fortify SCA, or Aqua Security.

Experience integrating SAST solutions into CI/CD pipelines and automating security controls within development workflows. Solid hands-on experience with GitHub Actions workflow development, configuration, and troubleshooting.

Experience with pipeline configuration, automation, and security integration using GitHub, Azure DevOps, GitLab, and Jenkins. Proficiency in scripting languages such as Python or Bash for security automation and process optimization. Development experience in at least one programming language such as Python, Java, C, or C#.

Experience working with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform (GCP). Knowledge of secure coding practices, vulnerability management, and application security best practices. Strong understanding of OWASP Top 10, secure development methodologies, and risk-based remediation.

Experience performing Application Security Assessments, vulnerability analysis, and remediation validation. Ability to analyze security findings, provide remediation guidance, and work closely with development teams to address risks.

Experience working within Agile, DevOps, and cloud-native development environments. Minimum 5+ years of hands-on experience in Application Security, DevSecOps, and Secure SDLC initiatives.



Strong experience in implementing and managing Static Application Security Testing (SAST) solutions across enterprise environments. Hands-on experience with at least one SAST tool such as Checkmarx, Snyk, SonarQube, Fortify SCA, or Aqua Security.

Experience integrating SAST solutions into CI/CD pipelines and automating security controls within development workflows. Robust hands-on experience with GitHub Actions workflow development, configuration, and troubleshooting.

Experience with pipeline configuration, automation, and security integration using GitHub, Azure DevOps, GitLab, and Jenkins. Proficiency in scripting languages such as Python or Bash for security automation and process optimization. Development experience in at least one programming language such as Python, Java, C, or C#.

Experience working with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform (GCP). Knowledge of secure coding practices, vulnerability management, and application security best practices. Strong understanding of OWASP Top 10, secure development methodologies, and risk-based remediation.

Experience performing Application Security Assessments, vulnerability analysis, and remediation validation. Ability to analyze security findings, provide remediation guidance, and work closely with development teams to address risks.

Experience working within Agile, DevOps, and cloud-native development environments.

Prior Experience : The candidate must have 4 to 8 years of relevant experience in a similar role, preferably in a professional services organization.

Experience Level Mid Level

📌 Application Security Consultant - Static Application Security Testing (SAST) (Bengaluru)
🏢 KPMG India Services
📍 Bengaluru