Join our Technology & Transformation practice to leverage vast data resources and provide strategic guidance. We help companies transform data into actionable insights for informed decision-making and competitive advantage. Our expertise spans business intelligence, data management, performance management, and advanced analytics including big data, cloud, cognitive, and machine learning.

This Senior Consultant role focuses on enhancing security within cloud environments and development lifecycles.

Design, implement, and manage secure cloud infrastructure and architectures, primarily on AWS, with familiarity in Azure/GCP. Develop and maintain CI/CD pipelines using Git, Terraform, and Infrastructure as Code (IaC). Integrate security tools like Checkmarx and Burp Suite into CI/CD processes. Automate security controls across development, testing, and deployment stages. Manage vulnerability identification, assessment, remediation, and ensure security compliance. Implement SAST, DAST, SCA, and secure SDLC practices throughout application development. Enhance cloud and application security via automated testing and remediation. Collaborate with cross-functional teams to identify and mitigate security risks. Drive DevSecOps automation and establish security best practices for cloud-native applications.

We are seeking a Senior Consultant with 5-7 years of experience in DevSecOps, Cloud Security, and Application Security. A Bachelor's or Master's degree in Computer Science, IT, Engineering, or a related field is preferred. Key technical proficiencies include AWS Cloud, Cloud Architecture, Azure/GCP, CI/CD Pipelines, Git, Terraform, and IaC. Experience with DevSecOps principles, Cloud Security, and Application Security is crucial. Familiarity with security tools like Checkmarx, Burp Suite, SAST, DAST, and SCA is required. Skills in Vulnerability Management, Security Automation, and Secure SDLC are essential. Working knowledge of Node.js, Python, and React.js, along with databases such as PostgreSQL, MongoDB, and DynamoDB, is beneficial. Demonstrated ability in Automated Security Controls, Vulnerability Remediation, and Security Testing is expected.