DevSecOps Engineer - Bengaluru/Bangalore - NTT @ NTT Data

Application DevSecOps engineer is responsible for building solution offerings of Application Security as a service comprising of Azure CI CD pipeline development, integration, testing and support for client. Candidate will be responsible for Azure DevOps implementation for application security activities

Role Responsibilities

• Understand application requirements to onboard them on DevSecOps pipeline in azure
• Work with Application team to understand build and release process
• Work with security team to understand security vulnerability tests to be performed
• Write custom tasks in Azure DevOps including PowerShell and NodeJS (if required) to integrate Appsec tools in Azure DevOps requirements
• Build CI/CD pipeline in Azure integrating CheckMarx and AppScan Standard tools
• Configure custom tasks, workflow and rules to build seamless experience of secure CI/CD pipeline for application developers
• Work with YAML for build/release pipeline to Configure Appsec tools at each code promotion
• Gather KPIs and metrics data to summarize and present for security stakeholders.
• Provide status reporting to required stakeholders for progress of DevSecOps
• Engage stakeholders; identify framework / libraries / dependencies that are in scope for DevSecOps

Work hours

• 11am - 9pm IST Typically
• Occasionally, depending upon requirement it can vary to achieve higher overlap with EST timings and can be as late as 4pm - 2am IST

Technical experience and skills

• 5-7 years of development experience on Microsoft technology
• 3 Mandatory experience in Azure DevOps build and release pipelines, .Net core, PowerShell script
• 2 Desired experience in Agile development, SonarQube, Postman, Soap UI
• 1 Desired experience in using security tools like Checkmarx, App scan,

Qualifications and other skills/ competencies:

• Degree in Computer Science / Engineering
• Excellent communication and interaction skills
• Self-initiator, interact, coordinate and collaborate with internal and external stakeholders
• Certifications like AZ-400, CEH, is an added advantage