DevSec Engineer - IT Services Sector (2-3 Yrs)

Role Summary:
As a DevSec Engineer with 2-3 years of experience and an M.Tech degree, you will be instrumental in integrating security practices into the software development lifecycle (SDLC) at TCS. You will work closely with development and operations teams to ensure that security is a core component from the initial design phase through deployment and maintenance. Your expertise will help build secure, robust, and resilient applications, aligning with industry best practices and company standards.

Key Responsibilities:
- Collaborate with development teams to embed security controls and best practices throughout the SDLC (DevSecOps).
- Conduct security code reviews, vulnerability assessments, and penetration testing on applications.
- Implement and manage security tools for static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA).
- Automate security testing processes within CI/CD pipelines.
- Analyze security scan results and provide actionable remediation guidance to development teams.
- Develop and maintain security documentation, policies, and procedures.
- Stay updated with the latest security threats, vulnerabilities, and industry trends.
- Participate in security incident response and post-incident analysis.
- Contribute to the development and enhancement of secure coding guidelines.
- Mentor junior team members on security best practices.