Create a free account
One signup unlocks everything for this job:
- Apply to this job and track your application
- See your personalized profile match score
- Generate an AI cover letter for this role
Business consulting · Unknown · Evanston, US
0 open roles0 posted in 7d0 in 30d
Work-life balance 2.9Compensation & benefits 4.2Culture & values 3.8
What employees say
+ i like the company and the environment
− there are no cons as such
More reviews on the company profile.
Interview experience · Data Science Intern
it was chill . there were 2 rounds , technical and hr technical lasted 1 hr and hr was shorter 45mins i sat through oncampus recruitment asked questions based on cv, guesstimates
Easy difficulty · Mumbai · 5 reports
More interview insightsJob description
Overview
: ZS is a place where passion changes lives.
Responsibilities
- Lead the design and implementation of DevSecOps framework, integrating security seamlessly into CI/CD pipelines across multiple environments and platforms.
- Collaborate with developers, SREs, and security teams to embed security controls and testing at build, deployment, and runtime stages.
- Build and manage automation for SAST, DAST, SCA, container security, and IaC scanning tools (e.g., SonarQube, Checkmarx, Snyk, Trivy, Terraform Scan).
- Analyze results from SAST, SCA, and DAST scans to validate findings, eliminate false positives, and work with development teams to prioritize and remediate security issues.
- Leverage expertise in TeamCity and AWS to build secure, scalable CI/CD pipelines and enforce security controls throughout the software delivery lifecycle
- Ensure ongoing visibility and reporting of security posture in cloud-native workloads, container platforms, and serverless environments.
- Lead training sessions and build developer-friendly resources to raise DevSecOps awareness across engineering teams.
- Stay current with evolving tools, threats, and best practices in secure software delivery, continuously innovating to improve security effectiveness and developer experience.
- Provide mentorship and security guidance to internal stakeholders to raise overall security maturity.
- Collaborate closely with Application Security teams to align on secure development standards, threat modeling efforts, and triaging complex vulnerabilities identified during code and runtime analysis.
Qualifications
- Bachelors in computer science /management of computer information/information assurance or Cybersecurity
- 6+ years of DevSecOps / Secure DevOps /Security Engineer/ Application & Cloud Security roles
- Must have Certifications: OSWE/CSSLP/ AWS Certified Solutions Architect / AWS Security Specialty
- Preferred Certifications: AWS CLP, GIAC (GCSA), GIAC (GWAPT), OSCP, OSWA, OSEP, eWPT
- Expertise in implementing DevSecOps practices in cloud-native CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Jenkins, TeamCity, Azure DevOps, Bit-Bucket).
- Strong hands-on experience with application security tools such as SonarQube, Fortify, Checkmarx, Snyk, Veracode, BlackDuck, Burp Suite, OWASP ZAP.
- Knowledge of containerization and orchestration security (Docker, Kubernetes, Helm) and tools like Trivy, Kube-bench, and Aqua.
- Working knowledge of programming/scripting languages like Python, Java, JavaScript, C#, .Net or go.
- Familiarity with cloud-native security controls (AWS Security Hub, Azure Defender, GCP Security Command Center).
- Strong scripting skills in Python, Bash, or PowerShell for automation and tool integration.
- Ability to develop and enforce security guardrails, policies, and standards in automated and scalable ways.
- In-depth understanding of OWASP, CWE, CVE scoring, and secure SDLC methodologies.
- Ability to clearly document findings and communicate risk effectively to technical and non-technical stakeholders.
- Fluency in English
- Client-first mentality
- Intense work ethic
- Collaborative spirit and problem-solving approach
- How youll grow:
- Cross-functional skills development & custom learning pathways
- Milestone training programs aligned to career progression opportunities
- Internal mobility paths that empower .
Verify JavaScript for this role
Free PRACTICE for JavaScript adds a verified skill signal that can boost how roles like this rank for you — optional, not required to browse or apply.
Sign up — verify JavaScript free →Want match scores and deeper insight? Create a free candidate profile
Job application FAQ
Last updated 15 September 2026
- How do I apply for Application Security Specialist at ZS?
- Open this job on Feedback AI and sign up free (or sign in). You can apply from the job detail page; match scores and skill gaps appear when your profile is complete. ZS may attach structured assessments to interview rounds after you apply.
- Does Feedback AI show a match score for this Application Security Specialist role?
- Yes after you add a resume or skills. Match score ranks this role against your profile — skills met, gaps, level, and location — so you prioritise applications where fit is strongest.
- Is Application Security Specialist remote or on-site in Mumbai, Maharashtra?
- This listing is marked on_site with location Mumbai, Maharashtra. Confirm details on the job description before applying.
- What skills matter for this Application Security Specialist role at ZS?
- Key skills for this role include skills listed in the job description. Upload a resume to see which requirements you already meet and which are gaps.