Pune SASTDAST Engineer

Job description

Lead and manage application security testing activities across multiple applications and projects. Oversee and drive engagements involving SAST, DAST, SCA, Grey Box Security Testing, and Threat Modelling. Review security findings, perform vulnerability triaging, and provide remediation recommendations to development teams. Coordinate closely with application, development, infrastructure, and security stakeholders. Drive governance reviews, status reporting, risk tracking, and client communications. Ensure compliance with Secure SDLC practices and application security best practices. Support integration of security tools and controls within CI/CD pipelines and DevSecOps initiatives. Mentor, coach, and provide technical guidance to security testing engineers and team members. Promote continuous improvement of application security processes, standards, and methodologies. Your Profile: 5 to 9 years of experience in Application Security, Vulnerability Management, or Product Security. Strong hands-on expertise in Static Application Security Testing (SAST). Strong hands-on expertise in Dynamic Application Security Testing (DAST). Experience with Software Composition Analysis (SCA) tools and methodologies. Good understanding of Grey Box Security Testing techniques. Expertise in Threat Modelling and risk identification. Experience conducting Vulnerability Assessments and security reviews. Strong knowledge of Secure Software Development Lifecycle (Secure SDLC) practices. In-depth understanding of OWASP Top 10 security risks and mitigation techniques. Familiarity with OWASP ASVS (Application Security Verification Standard). Experience with API Security Testing and securing modern web services. Ability to analyze security findings and provide effective remediation guidance to development teams. Experience supporting security tool integration within CI/CD pipelines and DevSecOps environments. Strong stakeholder management, communication, reporting, and client-facing skills. Prior experience leading application security engagements and mentoring junior security engineers. Relevant security certifications such as CEH, CSSLP, GWAPT, OSCP, CISSP, or equivalent are desirable. What will you love working at Capgemini: You will have the opportunity to learn on one of the industry's largest digital learning platforms, with access to 250,000+ courses and numerous certifications. We’re committed to ensure that people of all backgrounds feel encouraged and have a sense of belonging at Capgemini. You are valued for who you are, and you can bring your original self to work . At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges. Capgemini office campuses in India are green and run on 100% renewable electricity. We have installed Solar plants across India locations and ‘Battery Energy Storage Solution’ (BESS) in the Noida and Mumbai campuses. You will have chance to make a difference everyday. Ref. code: 551637 Posted on: 17 Sept 2026 Experience Level: Experienced Professionals Contract Type: Permanent Location: Pune, IN Brand: Capgemini Engineering Professional Community: Software Engineering Apply now » Apply now Apply Now Start applying with LinkedIn Please wait... Find similar jobs: All rights reserved by Capgemini. Copyright © 2025 × Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Show More Details Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data centre "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Advertising Cookies These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies. Consent to all Advertising Cookies Show More Details Advertising Cookies Provider Description Enabled LinkedIn LinkedIn is an employment-oriented social networking service. We use the Apply with LinkedIn feature to allow you to apply for jobs using your LinkedIn profile. Opting out of LinkedIn cookies will disable your ability to use Apply with LinkedIn. Cookie Policy Cookie Table Privacy Policy Terms and Conditions Consent to cookies from provider LinkedIn Confirm My Choices Reject Optional Cookies Accept All Cookies