DevSecOps Engineer PwC

Roles and Responsibilities
• Implementation of secure coding practices and automation and integration of the DevSecOps processes
• Automate and integrate application and system cybersecurity controls as tollgates into development lifecycle
• Apply the best practices of secure development for cloud technology, internet servers, virtualized containers and orchestration, web-enabled database applications and databases etc.
• Understand various DevOps models and how-to plug-in security and compliance with minimal disruption
• CI/CD integration of SAST tools (Fortify SCA, Checkmarx, Veracode etc.), DAST tools (WebInspect, Appscan etc.) and Vulnerability Management tools (Qualys, Risksense etc.) ensuring seamless integration with the existing build and operations processes
• Implementation of threat modeling processes and tools in conjunction with development teams
• Perform vulnerability assessments & penetration testing of web & mobile applications

Education
• Bachelor's degree in Computer Science, Computer Engineering, technology-related field, or equivalent work experience

Work experience
• Minimum of 3 years of combined experience in software engineering and DevSecOps in an information security context

Skills/abilities
• Ability to integrate and automate security and compliance controls in Azure DevOps
• Familiarity with Kubernetes orchestration
• Experience with Azure AD and other IDAM technologies
• Excellent written and verbal communication skills
• Knowledge of key cybersecurity technologies such as application security design principles, authentication and authorization models, secure coding, penetration testing.

Location

PwC Office location- PAN India, Mumbai preferred

Vacancy

1 (Sr. Associate)

Experience

3-7 years