TC - CS - CTM - Appsec - Senior
BengaluruFull-time3–6 yrsPosted 1 week ago
Mid-level cybersecurity role at EY in Bengaluru. Needs 3+ years and an MCA, B.Tech or B.E..
About the role
As part of our Cyber Security team, you will implement and support Secure SDLC (SSDLC) and DevSecOps practices across the software development lifecycle, ensuring security is embedded into design, development, testing, and deployment stages. You will perform hands-on security assessments of applications, APIs, and supporting infrastructure, and work closely with DevOps, Architects, Developers, and QA teams to integrate security into CI/CD pipelines.
What you'll do
- Implement Secure SDLC (SSDLC) practices across application development and CI/CD pipelines
- Perform application security assessments including SAST, DAST, SCA, and basic threat modeling
- Integrate and automate security tools within CI/CD pipelines (e.g., secret scanning, IaC scanning, container security)
- Support development teams in secure coding practices, vulnerability remediation, and code reviews
- Work on DevSecOps pipeline implementation and optimization using enterprise and open-source tools
What you need
- Linux
- OWASP
- Cloud security
- Python
- CI/CD
- Azure
Good to have
- Git
- AWS
- GCP
- Terraform
- Machine learning
- LLMs