Consultant/Senior Consultant- SAST App Sec Secret Managemet in Pune
EY
EY
Join a global leader in assurance, tax, transaction, and advisory services, dedicated to cultivating passionate professionals and fostering a culture of continuous growth. This role focuses on application security, specifically secrets management, for our client in Pune. We offer a supportive environment where your career is yours to build, with limitless potential and enriching experiences to help you achieve your professional best.
Govern and track secrets findings across repositories, ensuring timely remediation within defined SLAs. Collaborate with development, platform, risk, and compliance teams on remediation, exceptions, and risk acceptances. Maintain audit-ready documentation, metrics, and executive reporting. Monitor remediation progress, identify overdue items, and escalate stakeholder issues as needed. Serve as the primary point of contact for developer inquiries, providing guidance on findings and governance processes. Analyze security tool findings, validate closures, review false positives, and contribute to process improvements. Deliver regular governance reports and fine-tune secret scanning rulesets to minimize false positives.
We are seeking an experienced Application Security professional with 4-5 years of experience in Application Security, SSDLC, or Governance roles. A Bachelor's Degree in IT, Engineering, or a related field is required. Essential skills include a strong understanding of secrets exposure risks, experience reviewing secrets scanning outputs, working knowledge of SAST concepts and governance workflows, familiarity with GitHub and CI/CD environments, and excellent documentation, coordination, and communication skills. Experience with Checkmarx tools, enterprise tracking tools like ServiceNow, and Security Governance are considered advantageous.
EY Global Delivery Services ( EY GDS)
Information Technology & Services