Responsibilities
- Lead DevSecOps operations and cybersecurity testing for web applications and APIs.
- Perform SAST, DAST, fuzzing, software composition analysis, and detailed source code reviews.
- Assess CI/CD pipelines and software supply chains for security gaps, misconfigurations, vulnerabilities, and privilege escalation risks.
- Define, create, automate, execute, and validate security test cases across development, UAT, and production promotion stages.
- Drive shift-left security practices and embed security testing into SDLC and sprint cycles.
- Review remediation activities and provide risk-based recommendations.
- Collaborate with development, QA, DevOps, architecture, and product teams.
- Mentor junior engineers and contribute to security standards, governance, and best practices.
Requirements
- 5–7 years of experience in application security testing or DevSecOps.
- Hands-on experience with web application security testing and API security testing.
- Experience with SAST, DAST, fuzzing, software composition analysis, CI/CD pipeline security testing, and software supply chain security testing.
- Strong understanding of SDLC, secure coding practices, shift-left security, OWASP Top 10, API Security Top 10, and common application security vulnerabilities.
- Experience creating and automating security test cases in agile or sprint-based environments.
- Experience working with development, DevOps, QA, and product teams.
- Strong analytical, communication, and stakeholder management skills.
- Preferred experience with AWS, Azure, or GCP; container, Kubernetes, and infrastructure-as-code security; and integrating security tools into CI/CD pipelines.
- Relevant certifications such as CISSP, CSSLP, GWAPT, or DevSecOps-related certifications are preferred.
Tech Stack
Categories
About Atos
Atos Group is a global leader in digital transformation with c. 56,000 employees and annual revenue of c. €7.2 billion (at the go-forward perimeter), operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris. Atos is the services brand of Atos Group, delivering AI powered, secure and end to end digital services to public and private organizations worldwide. Atos designs, builds and run digital environments that are critical to performance, resilience and sovereignty, helping clients keep control of their data, infrastructure and compliance, with clear accountability from strategy to operations. With more than 54,000 people serving 4,500+ clients in 54 countries, Atos helps modernize core IT, accelerate cloud and data transformation, strengthen cybersecurity and enable secure digital workplaces, delivering impact for clients, employees and society at large. Atos offers end-to-end IT services across the cloud, cybersecurity, data and AI, application services, smart platforms and digital workplace, as well as localized consulting and advisory services under its brand Atos Amplify. Atos is trusted to operate complex, business-critical environments, especially in regulated and sovereign contexts.