Browse Jobs
Explore open roles across India.Explore active software roles. Sign up to apply and get AI match scores.
Top MatchesTop Job Matches
Loading jobs…
Senior Application Security Analyst (DevSecOps)
ZS
Pune•Hybrid•3-5 Yrs•Jun 28
Job description
Hybrid
Overview
ZS is a place where passion changes lives.
Responsibilities
- Support the implementation of DevSecOps practices by integrating security tools and controls into CI/CD pipelines across development and staging environments.
- Collaborate with developers, SREs, and security teams to incorporate security checks during build, deployment, and runtime phases.
- Configure and operate security scanning tools such as SAST, DAST, SCA, container security, and IaC scanning (e.g., SonarQube, Checkmarx, Snyk, Trivy, Terraform Scan).
- Review and analyze findings from security scans, assist in validating vulnerabilities, and help reduce false positives.
- Work with development teams to remediate identified vulnerabilities and track fixes to closure.
- Assist in maintaining CI/CD pipelines (e.g., TeamCity, AWS-based pipelines) with embedded security controls.
- Contribute to “shift-left” initiatives by helping implement reusable pipeline components and security checks.
- Monitor and report on security issues in applications, containers, and cloud environments.
- Support the creation of documentation, guidelines, and basic training materials for secure development practices.
- Stay updated with common application security vulnerabilities, tools, and DevSecOps best practices.
- Collaborate with Application Security teams to support vulnerability triage, basic threat modeling activities, and secure coding practices.\
- Provide day-to-day support to developers and teams on resolving security issues and tool usage
Qualifications
- Bachelor’s in computer science /management of computer information/information assurance or Cybersecurity
- 3-5+ years of DevSecOps / Secure DevOps /Security Engineer/ Application & Cloud Security roles
- Preferred Certifications: CSSLP / AWS CLP / AWS Certified Solutions Architect / AWS Security Specialty
- Expertise in implementing DevSecOps practices in cloud-native CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Jenkins, TeamCity, Azure DevOps, Bit-Bucket).
- Strong hands-on experience with application security tools such as SonarQube, Fortify, Checkmarx, Snyk, Veracode, BlackDuck, Burp Suite, OWASP ZAP.
- Knowledge of containerization and orchestration security (Docker, Kubernetes, Helm) and tools like Trivy, Kube-bench, and Aqua.
- Working knowledge of programming/scripting languages like Python, Java, JavaScript, C#, .Net or go.
- Familiarity with cloud-native security controls (AWS Security Hub, Azure Defender, GCP Security Command Center).
- Strong scripting skills in Python, Bash, or PowerShell for automation and tool integration.
- Ability to develop and enforce security guardrails, policies, and standards in automated and scalable ways.
- In-depth understanding of OWASP, CWE, CVE scoring, and secure SDLC methodologies.
- Solid understanding of emerging threats and vulnerabilities
- Fluency in English
- Client-first mentality
- Intense work ethic
- Collaborative spirit and problem-solving approach
- Cross-functional skills development & custom learning pathways
- Milestone training programs aligned to career progression opportunities
- Internal mobility paths that empower growth via s-curves, individual contribution and role expansions