3 days ago
Mumbai, IndiaMid Level / Senior
Responsibilities
- Manage DevSecOps capabilities including vulnerability scanning, certificate management, password policy management, cloud resource provisioning, security monitoring, and remediation patching.
- Develop automated security frameworks, deployment tools, and security processes using scripting languages and open-source solutions.
- Coordinate and perform vulnerability assessments using SAST, DAST, IAST, SCA, IaC, secret, and container image scanning tools.
- Review vulnerability data, identify security risks and false positives, develop mitigation plans, and lead remediation within established timeframes.
- Generate vulnerability management and risk reports for management and executives using security products and PowerBI.
- Integrate security tools with APIs, plugins, and established CI/CD pipelines, and manage security integration into the SDLC.
- Support code reviews, security bug intake and remediation, application security services, and technical-debt reduction.
- Configure and use computer security, networking, cloud, and monitoring tools; troubleshoot issues and performance bottlenecks.
- Own and document medium and large epics, present security solutions, and participate in security, requirements-gathering, inner-sourcing, and procurement initiatives.
- Collaborate with Engineering, DevOps, Product, SRE, infrastructure, and cross-business-unit teams, and mentor junior developers, DevOps engineers, and security engineers.
Requirements
- 3–5 years of prior experience in production engineering or a related position.
- Experience working with Developers, DevOps, and Engineering teams to implement DevSecOps programs.
- Proficiency in Java, Bash, PowerShell, Python, Terraform, or other scripting languages.
- Experience with AWS and Azure cloud security, architecture, policies, configuration, resource provisioning, and security management tools.
- Experience coordinating vulnerability assessments using automated and manual tools such as SAST, DAST, and IAST.
- Experience with vulnerability management, vulnerable-code remediation, security reporting, and executive communications.
- Knowledge of API security, container security, application security, penetration testing, vulnerability scanning, encryption, certificate management, and key management systems.
- Knowledge of Windows and Linux patch management, authentication, iptables, SSL, ciphers, and security monitoring and diagnostic tools.
- Ability to integrate security tools into CI/CD pipelines using APIs and plugins.
- Familiarity with CIS, NIST, RFC 2196, SANS 25, and OWASP Top 10.
- Ability to work independently, coordinate remediation, collaborate across functions, present security solutions, and mentor junior personnel.
- Familiarity with Terraform, Ansible, GitHub, Jenkins, Azure DevOps, SAST, DAST, and SCA.
Benefits
- Hybrid schedule with Mumbai preferred or Bangalore location options.
- Rotational shift schedule.
Categories
About CSC
CSC (Corporation Service Company) provides business formation, registered agent, and entity compliance services, plus domain and digital brand protection, to companies and law firms. It offers subscription and transactional services spanning corporate filings, UCC and tax management, and online brand enforcement. Founded in 1899 and headquartered in Wilmington, Delaware, CSC is privately held and serves enterprises across the U.S. and internationally.