Skip to content

Senior DevSecOps Engineer

Apply
Apply

Share

successfully icon

Successfully

The vacancy has been successfully added to favorites

location icon

Pune, India

specialization icon

Application Security

lob icon

BCM Industry

date icon

19/10/2026

Req. VR-125468

Apply
Project description

DevSecOps Security Engineer role will have a major role to help implementing shift left security in DevSecOps program and define the required security guardrails. In addition, the role will cover leading a team of DevSecOps Security members (Security Testers and Risk Assessors) as those members will be working with dedicated teams of developers to perform many activities such as security scanning, penetration testing and risk assessment (threat modeling). Also establishing security champion program with secure code warrior.

Responsibilities
bullet icon

Develop and update internal cyber security function processes for DevSecOps program

bullet icon

Craft cyber security function requirements on the DevSecOps program:

bullet icon

Cybersecurity tools requirements and the integration to CI/CD pipelines to improve developer productivity, agility and code quality Prepare and present design and implementation documentation to multiple stakeholders.

bullet icon

Requirements for Application Security Orchestration & Correlation (ASOC)

bullet icon

Requirements for integrating all Application security tools (DAST , SAST, SCA, IAST, MAST and Threat Modeling) and vulnerability scanning tools ( Nexpose, Qualys, Nessus) with CI/CD tools

bullet icon

Implementing Security Guardrails

bullet icon

Mentor and coach junior-level DevSecOps security team member

bullet icon

Work closely with cross-functional stakeholders to analyze and troubleshoot complex production issues.

bullet icon

Collaborate closely with development teams to understand their current build and release processes and make recommendations for improvement.

bullet icon

Partner with cross-functional stakeholders, including development, operations, quality assurance and security, to streamline processes.

bullet icon

Provide guidance to development teams to improve performance and operability of the solutions they develop.

bullet icon

Continuously improve automation idea to enable teams to secure code efficiently and consistently.

bullet icon

Highlight automated testing requirements to reduce manual effort and improve product quality.

Skills

Must have

bullet icon

Skills & Experience Essential

bullet icon

10+ years software engineering and technology delivery experience.

bullet icon

Strong hands-on development background with evidence of significant code contributions.

bullet icon

Expertise in:

bullet icon

Java

bullet icon

Spring Framework / Spring Boot

bullet icon

CI/CD pipelines

bullet icon

Git-based development

bullet icon

Cloud platforms like GCP

bullet icon

Experience managing enterprise vulnerability programmes.

bullet icon

Strong understanding of:

bullet icon

OSS Vulnerability Management

bullet icon

Veracode

bullet icon

Secure SDLC

bullet icon

DevSecOps

bullet icon

Application Security

bullet icon

Cyber Hygiene controls

bullet icon

Security risk management

bullet icon

Proven ability to coordinate large-scale remediation programmes across multiple applications and teams.

bullet icon

Strong stakeholder management experience working with senior technology and security leadership. ________________________________________ Preferred

bullet icon

Experience in financial services or highly regulated environments.

bullet icon

Security certifications such as:

bullet icon

CISSP

bullet icon

CSSLP

bullet icon

GIAC

bullet icon

AWS/Azure Security certifications

bullet icon

Experience implementing security tooling and automation at scale.

bullet icon

Experience leading technology modernisation and upgrade initiatives. ________________________________________ Success Measures The role will be measured against:

bullet icon

Reduction in Critical and High vulnerabilities.

bullet icon

Elimination of overdue vulnerabilities.

bullet icon

Reduction in vulnerability ageing profile.

bullet icon

Renovate adoption across Treasury repositories.

bullet icon

Veracode compliance and policy adherence.

bullet icon

Cyber Hygiene compliance improvements.

bullet icon

Reduction in manual remediation effort through automation.

bullet icon

Increased percentage of vulnerabilities remediated within SLA.

bullet icon

Improved Treasury Technology security posture and audit outcomes.

Nice to have

bullet icon

Banking Domain

Other
seniority icon

Languages

English: C2 Proficient

seniority icon

Seniority

Senior

Pune, India

Req. VR-125468

Application Security

BCM Industry

19/10/2026

Req. VR-125468

Apply for Senior DevSecOps Engineer in Pune

*Indicates a required field

Under the terms of your specific consent or to perform our obligations under a contract with you, as applicable, we, Luxoft Holding Inc. will manually and electronically process your personal data, specifically your first name, last name, phone number, e-mail address and other data you provide us through this form.


Within this context, we process personal data only for the specific purpose(s) indicated in the individual consent language or other notices provided below.


We will – insofar as reasonably necessary for the purpose you have agreed to and within the scope of applicable laws – transfer your personal data to other entities within the Luxoft Group and to the group of third party recipients listed in our Privacy Notice. Such Recipients can be located outside the European Union (EU) and/or the European Economic Area (EEA) (“Third Countries”). The Third Countries concerned, e.g. the USA, may not have the level of data protection that you enjoy e.g. under the GDPR. This can result in disadvantages such as an impeded enforcement of data subjects’ rights, a lack of control over further processing and access by state authorities. You may only have limited legal remedies against this. Insofar our transfer of your personal data to recipients in Third Countries is not covered by an adequacy decision of the EU Commission, we achieve an adequate level of data protection as further detailed out in our Privacy Notice.


With your consent, we personalise marketing communications to you by way of carrying out marketing research analysis, analysing the surfing-behaviour of our website visitors and to adjust it to their detected tendencies, as well as to plan more efficient future marketing activities. This personalised marketing does not include any automated decision-making activities.


Further information on how we process personal data in general is available in our Privacy Notice. You may withdraw any given consent at any time. The withdrawal of your consent(s) will not affect the lawfulness of processing before its withdrawal. For any request in this context, please e-mail us at: DPO@luxoft.com.


Before uploading CV or any other information to this website, to learn more about your obligations and restrictions arising from the use of this website, please read our Terms of Use.