15 hours ago
Bengaluru, IndiaMid Level
Responsibilities
- Integrate security controls and best practices across phases of the SDLC.
- Assist with static and dynamic code analysis, open-source dependency analysis, security assessments, and limited penetration testing.
- Conduct manual and automated code reviews to identify vulnerabilities and coding flaws.
- Collaborate with software engineers on secure coding practices and security testing in CI/CD pipelines.
- Evaluate, deploy, and tune SAST, DAST, and SCA platforms.
- Maintain secure deployment workflows and support security automation efforts.
- Participate in security reviews, vulnerability triage, remediation efforts, and security standards development.
- Document processes and playbooks and promote a security-first culture.
Requirements
- Bachelor’s degree in computer science, cybersecurity, or a related technical field.
- At least 2 years of experience in cybersecurity, software engineering, or DevOps, including at least 1 year focused on application or product security.
- Understanding of common web application vulnerabilities, including OWASP Top 10 and CWE, and remediation strategies.
- Familiarity with DevSecOps tools, including SAST, DAST, and SCA, and secure SDLC methodologies.
- Ability to analyze code and identify security issues with guidance.
- Preferred experience with GitHub Actions, GitLab CI, Jenkins, Python, JavaScript, Java, NIST, OWASP SAMM, ISO 27001, PCI DSS, regulated environments, bug bounty triage, AWS, Azure, or GCP.
- Professional certifications such as Security+, CEH, eJPT, OSCP, or equivalent are preferred.
Benefits
- Generous time off policies.
- Top-shelf benefits.
- Education, wellness, and lifestyle support.
Tech Stack
Categories
About DigiCert
DigiCert is a public certificate authority and digital trust vendor that sells TLS/SSL certificates, managed PKI, device and code-signing certificates, and the DigiCert ONE certificate lifecycle management platform to enterprises and public-sector customers. Its tools secure websites, software, identities, and connected devices across cloud and on‑prem environments. Founded in 2003 and headquartered in Lehi, Utah, the company is privately held under Thoma Bravo.