1 day ago
Pune, IndiaSenior
Responsibilities
- Embed application security controls into CI/CD pipelines and provide actionable feedback to engineers.
- Investigate, remediate, and validate application security findings, including managing exceptions and false positives.
- Conduct targeted code reviews with engineers and platform teams to identify security issues early.
- Implement and maintain security controls, integrations, and automations for applications and APIs.
- Perform threat modeling to identify abuse cases, threat actors, and preventative and detective controls.
- Design and improve security tooling and CI/CD integrations while reducing noise and prioritizing risk.
- Participate in the METRO Corporate Information Security engineering community to define best practices and execute security activities.
- Mentor engineers and raise awareness of security mandates and secure coding practices.
Requirements
- Experience identifying, investigating, and remediating application vulnerabilities across all stages of the SDLC.
- Hands-on experience writing and reviewing code and contributing to developer workflows such as design reviews, planning, and implementation.
- Experience designing, implementing, and improving security tooling and CI/CD integrations.
- Strong developer experience focus and the ability to communicate security issues clearly.
- Familiarity with monolithic and microservice-based application architectures.
- Solid understanding of OWASP Top 10, SAMM, ASVS, and FIRST principles.
- Comfort working with one or more programming languages such as Java, C++, Python, or JavaScript.
- Experience with LLMs, AI, and agentic coding platforms such as GitHub Copilot, Gemini, or Claude Code.
- Proven experience as a security subject-matter expert, including mentoring and raising awareness of security mandates.
Tech Stack
Categories
About METRO AG
METRO AG is a German wholesale company serving hotels, restaurants, caterers (HoReCa) and independent retailers via cash-and-carry stores and foodservice delivery. It operates in more than 30 countries with a network of stores and dedicated delivery depots, supported by global shared-service centers for IT, finance, and HR. Headquartered in Düsseldorf and established as METRO AG in 1996, it is a publicly listed business focused on professional B2B customers rather than consumers.