4 months ago
Bengaluru, IndiaMid Level
H1B Sponsor
Responsibilities
- Integrate security controls and best practices across phases of the SDLC.
- Perform or support static and dynamic code analysis, open-source dependency analysis, code reviews, and limited penetration testing.
- Collaborate with software engineers to promote secure development and integrate security testing into CI/CD pipelines.
- Evaluate, deploy, and tune DevSecOps tools such as SAST, DAST, and SCA platforms.
- Maintain secure deployment workflows and support security automation.
- Triage vulnerabilities from internal scans, bug bounty submissions, and external assessments.
- Collaborate with engineering teams on vulnerability remediation and security reviews of new features and systems.
- Document security processes and playbooks and contribute to internal security standards and reference architectures.
- Stay current on application security threats, vulnerabilities, and best practices.
Requirements
- Bachelor’s degree in computer science, cybersecurity, or a related technical field.
- At least 2 years of experience in cybersecurity, software engineering, or DevOps, including at least 1 year focused on application or product security.
- Experience with Python, JavaScript, or Java.
- Familiarity with SAST, DAST, and SCA tools and secure SDLC practices.
- Understanding of common web application vulnerabilities, including OWASP Top 10 and CWE, and their remediation.
- Ability to analyze code and identify security issues with guidance.
- Preferred experience with GitHub Actions, GitLab CI, or Jenkins.
- Preferred familiarity with NIST, OWASP SAMM, ISO 27001, or PCI DSS.
- Experience in a regulated environment, bug bounty triage, or cloud platforms such as AWS, Azure, or GCP is preferred.
- Security certifications such as Security+, CEH, eJPT, OSCP, or equivalent are preferred.
Benefits
- Generous time off policies
- Top shelf benefits
- Education, wellness, and lifestyle support
Tech Stack
Categories
About DigiCert
As the leading provider of digital trust, DigiCert solutions help you engage online with confidence, knowing your data and connections are secure. From enterprise solutions to software security, identity management to IoT, and DNS to quantum cryptography, DigiCert is trusted around the globe by individuals, businesses, governments, and 90% of Fortune 500 companies.