How do I apply for Application Security with DevSecOps at Kyndryl?

Open this job on Feedback AI and sign up free (or sign in). You can apply from the job detail page; match scores and skill gaps appear when your profile is complete. Kyndryl may attach structured assessments to interview rounds after you apply.

Does Feedback AI show a match score for this Application Security with DevSecOps role?

Yes after you add a resume or skills. Match score ranks this role against your profile — skills met, gaps, level, and location — so you prioritise applications where fit is strongest.

Is Application Security with DevSecOps remote or on-site in Noida, Uttar Pradesh?

This listing is marked hybrid with location Noida, Uttar Pradesh. Confirm details on the job description before applying.

What skills matter for this Application Security with DevSecOps role at Kyndryl?

Key skills for this role include Hybrid. Upload a resume to see which requirements you already meet and which are gaps.

Application Security with DevSecOps at Kyndryl

Back to Browse Jobs

Kyndryl

Create a free account

One signup unlocks everything for this job:

Apply to this job and track your application
See your personalized profile match score
Generate an AI cover letter for this role

Kyndryl 3.6(6,012)

Noida · Hybrid · 8-11 Yrs · Sep 19

Information Technology Support Services · 10000+ Employees · New York, US

7 open roles2 posted in 7d7 in 30d

Work-life balance 3.8Compensation & benefits 3.3Culture & values 3.6

Kyndryl is the world's largest provider of IT infrastructure services serving thousands of enterprise customers in more than 60 countries. We design, build, manage and modernize the mission-critical information technology the world depends on every day. Our business quite literally powers the vital systems that run banks, stock markets, airlines, automotive and healthcare companies, governments and more. Kyndryl is at the heart of progress — dedicated to helping companies and people grow strong. With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Our people are actively discovering, co-creating, and strengthening. We push ourselves and each other to seek better, to go further, and we carry this energy to our customers. Core to our culture is maintaining an inclusive, engaging and flexible work environment for our employees. We have embraced a flexible workplace policy that helps Kyndryl employees achieve business results and work-life balance. Many of our jobs can be done flexibly and we actively encourage our managers and employees to have open discussions around what works best for them. We care about our employees well-being and pride ourselves on offering benefits that give choice, reflect the diversity of our employees and support them and their family through the moments that matter – wherever they are in their life journey.

Hiring: Engineering

What employees say

+ Good for work life balance

− Proper management should handle project

More reviews on the company profile.

Interview experience · Testing

The interview included coding questions, managerial and team-handling scenarios, AWS-related concepts, and software testing questions. The interviewers assessed both technical expertise and leadership skills. Overall, it

Average difficulty · Bengaluru · 182 reports

More interview insights

Job description

Hybrid

Overview

The Role We are seeking a seasoned Application Security Subject Matter Expert (SME) with 8+ years of experience across multiple facets of application security including SAST, DAST, SCA, Container security, DevSecOps integration, and threat modelling.

Responsibilities

Lead threat modeling workshops for critical applications and services.
Perform manual security testing to assess business logic, abuse cases, and advanced attack scenarios.
Validate and exploit high-risk findings from DAST tools such as Fortify WebInspect to confirm impact and reduce false positives.
Strong understanding of security integration for application and infra level security assessments in DevSecops pipeline
Understanding of Containers, Microservices based applications security considerations
Container security assessment knowledge
Knowledge of cloud security aspects is also preferred
Provide second-level triage of critical and high-severity vulnerabilities identified across SAST and DAST.
Conduct in-depth discussions with application stakeholders to review critical findings, false positives, and exception requests.
Guide application teams in remediation planning, secure design alternatives, and architecture-level mitigations.
Conduct DAST tool coverage reviews and evaluate feature utilization to maximize effectiveness.
Ensure SAST and DAST testing, reporting, and remediation SLAs are consistently met.
Track security metrics (coverage, SLA compliance, MTTR) and present insights to AppSec leadership.
Collaborate with development, DevOps, and product teams to embed AppSec controls in CI/CD pipelines.
Mentor and guide junior analysts (L1/L2) in vulnerability triage, secure coding, and manual testing techniques.
Contribute to security automation opportunities, improving efficiency of AppSec processes and tooling.
Act as a trusted advisor and escalation point for application security issues.
Lead second-level report discussions with business and technical stakeholders for critical vulnerabilities.
Support secure design and architecture discussions for new initiatives and high-risk projects.
SAST: Fortify SCA, Checkmarx, SonarQube, Veracode
DAST: Fortify WebInspect, Burp Suite Pro, OWASP ZAP, AppScan, Netsparker
Threat Modeling: Microsoft Threat Modeling Tool, OWASP Threat Dragon, custom frameworks
DevSecOps: Jenkins, GitLab CI, GitHub Actions, Azure DevOps integration for security scanning
Container security : assessments using Palo Alto Prisma Cloud, Trivy, Wiz etc
Supporting Tools: Postman, Charles Proxy, MobSF (mobile), Splunk/Power BI for reporting

Qualifications

8+ years of experience in Application Security spanning SAST, DAST, manual testing, and secure SDLC.
Proven experience in threat modeling, risk assessments, and secure design reviews.
Strong knowledge of OWASP Top 10, API Security Top 10, SANS Top 25, CWE, and emerging threat vectors.
Hands-on expertise in integrating security tools within DevSecOps pipelines.
Excellent stakeholder communication and leadership skills.
OSWE / OSCP / OSEP (advanced exploit and web testing)
CISSP / CSSLP (for security leadership & secure SDLC expertise)
GWAPT / GWEB (web application security)
Cloud security certs (CCSP, AWS Security Specialty, Azure SC-100) - must have one cloud security certification
Bachelor's degree in Computer Science, Information Technology, or related field.

Verify General for this role

Free PRACTICE for General adds a verified skill signal that can boost how roles like this rank for you — optional, not required to browse or apply.

Want match scores and deeper insight? Create a free candidate profile

Job application FAQ

Last updated 30 September 2026

How do I apply for Application Security with DevSecOps at Kyndryl?: Open this job on Feedback AI and sign up free (or sign in). You can apply from the job detail page; match scores and skill gaps appear when your profile is complete. Kyndryl may attach structured assessments to interview rounds after you apply.
Does Feedback AI show a match score for this Application Security with DevSecOps role?: Yes after you add a resume or skills. Match score ranks this role against your profile — skills met, gaps, level, and location — so you prioritise applications where fit is strongest.
Is Application Security with DevSecOps remote or on-site in Noida, Uttar Pradesh?: This listing is marked hybrid with location Noida, Uttar Pradesh. Confirm details on the job description before applying.
What skills matter for this Application Security with DevSecOps role at Kyndryl?: Key skills for this role include Hybrid. Upload a resume to see which requirements you already meet and which are gaps.