Join our team as a SAST/DAST Engineer, playing a pivotal role in application security. This permanent position within Capgemini Engineering in Pune offers an exciting opportunity to lead and manage application security testing across various projects.

You'll be at the forefront of driving engagements that include SAST, DAST, SCA, Grey Box Security Testing, and Threat Modelling. This role is perfect for experienced professionals passionate about ensuring robust security postures for applications.

Your core responsibilities will involve overseeing and driving application security testing initiatives. This includes reviewing security findings, triaging vulnerabilities, and providing actionable remediation recommendations to development teams. You will also coordinate with various stakeholders, manage governance reviews, track risks, and lead client communications.

Furthermore, you'll ensure adherence to Secure SDLC practices and best-in-class application security standards. Integrating security tools into CI/CD pipelines and DevSecOps is also a key part of this role, alongside mentoring junior security engineers.

We are seeking candidates with 5 to 9 years of experience in Application Security, Vulnerability Management, or Product Security. A strong, hands-on expertise in Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) is essential.

Essential skills include experience with Software Composition Analysis (SCA), a good understanding of Grey Box Security Testing, and expertise in Threat Modelling. You should possess a deep knowledge of Secure Software Development Lifecycle (Secure SDLC) practices and the OWASP Top 10 security risks. Familiarity with OWASP ASVS, API Security Testing, and experience with CI/CD integration are also expected. Excellent stakeholder management and communication skills are a must.