Cybersecurity Application Security Consultant - DevSecOps

Cybersecurity Application Security Consultant – DevSecOps
Position Type: Permanent
Location: Bhopal, Madhya Pradesh, India
Salary: ₹50,000 INR per month

About the Role
We are seeking a highly motivated and skilled Cybersecurity Application Security Consultant with expertise in DevSecOps practices to join our growing team in Bhopal. This is a permanent position where you will play a crucial role in integrating security into every phase of the Software Development Life Cycle (SDLC), from design to deployment and operations. You will work closely with development, operations, and QA teams to ensure our applications are secure by design and by default.

Key Responsibilities

• Security Integration: Integrate security tools and processes into CI/CD pipelines (DevSecOps) to automate security testing, vulnerability scanning, and compliance checks.
• Application Security Testing: Conduct various application security tests, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and Software Composition Analysis (SCA).
• Vulnerability Management: Identify, analyze, and prioritize security vulnerabilities in applications and provide actionable recommendations for remediation.
• Security Architecture Review: Participate in the design and architecture reviews of new and existing applications to identify potential security risks and recommend secure design patterns.
• Threat Modeling: Perform threat modeling exercises to identify potential threats and vulnerabilities early in the development lifecycle.
• Security Best Practices: Advocate for and implement secure coding guidelines, industry standards (e.g., OWASP Top 10, SANS Top 25), and security best practices within development teams.
• Security Training & Awareness: Provide guidance and training to development teams on secure coding practices and application security principles.
• Incident Response Support: Assist in the investigation and resolution of application security incidents.
• Documentation: Maintain comprehensive documentation of security findings, remediation efforts, and security policies.

Required Skills and Qualifications

• Education: Bachelor's degree or Engineering in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience: Proven experience (3+ years) in application security, with a strong focus on DevSecOps principles and practices.
• Development Experience: Practical experience in software development and understanding the full development lifecycle.
• Technical Proficiency:
• Strong understanding of web application security vulnerabilities (OWASP Top 10) and secure coding practices.
• Experience with security testing tools (e.g., Burp Suite, OWASP ZAP, Nessus, SonarQube, Checkmarx, Fortify).
• Familiarity with CI/CD tools (e.g., Jenkins, GitLab CI/CD, Azure DevOps, GitHub Actions, Semgrep, OpenGrep).
• Proficiency in at least one scripting language (e.g., Python, Bash) for automation.
• Understanding of cloud security principles (AWS, Azure, GCP) is a plus.
• Knowledge of containerisation technologies (Docker, Kubernetes) and their security implications.
• DevSecOps Mindset: Strong understanding of how to embed security into agile and DevOps methodologies.
• Communication: Excellent written and verbal communication skills, with the ability to explain complex security concepts to technical and non-technical stakeholders.
• Problem-Solving: Strong analytical and problem-solving skills with a keen eye for detail.

Preferred Qualifications

• Engineering in Computer Science or Cybersecurity

Job Type: Full-time

Pay: ₹40,000.00 - ₹45,000.00 per month

Work Location: In person