DL
DevSecOps Engineer
Diverse Lynx India
🇺🇸 United States
On-site
Manager or above
3 months ago
- DevSecOps
- SAST
- Nexus
- DAST
- CI/CD
- Burp Suite
- Qualys
3 months ago
Experience: 10+ Years (7+ Years may be considered for exceptional candidates)
Location: PAN India
Notice Period: Immediate to 30 Days Maximum
Interview Process: Client Round Mandatory
Job Summary
We are looking for an experienced Application Security Tools Administrator with strong expertise in AppScan installation, configuration, administration, and maintenance. The ideal candidate will be responsible for managing and supporting application security tools, ensuring their availability, integration, and optimal performance within enterprise environments.
This role is primarily focused on security tool administration and maintenance rather than vulnerability remediation or development activities.
Mandatory Skills
- HCL AppScan Source (SAST)
- AppScan Enterprise
- Nexus Lifecycle / Nexus IQ
- AppScan Installation, Configuration, and Administration
- Security Tool Infrastructure Setup and Management
- SAST (Static Application Security Testing)
- DAST (Dynamic Application Security Testing)
- DevSecOps
- CI/CD Pipeline Integration
- Application Security Tools Management
- Install, configure, upgrade, and maintain AppScan Enterprise and AppScan Source environments.
- Administer and support AppScan SAST scanning infrastructure across enterprise environments.
- Configure and maintain Nexus Lifecycle (Nexus IQ) for software composition analysis.
- Integrate security tools within CI/CD pipelines and DevSecOps workflows.
- Manage security tool servers, infrastructure, user access, and operational support.
- Perform troubleshooting, performance tuning, and issue resolution for security tools.
- Coordinate with infrastructure, development, and security teams for tool deployment and enhancements.
- Ensure high availability and operational stability of application security platforms.
- Support onboarding of applications and projects onto security scanning platforms.
- Prepare documentation, operational procedures, and configuration standards.
- Burp Suite Enterprise Administration
- Qualys Platform Administration
- tfsec
- Vulnerability Assessment
- Secure Code Review and Remediation Knowledge
- Security Automation and Scripting
- 10+ years of overall IT experience (7+ years may be considered for candidates with strong expertise in AppScan administration).
- Hands-on experience in AppScan installation, configuration, and administration is mandatory.
- Strong understanding of application security testing methodologies (SAST/DAST).
- Experience working with enterprise infrastructure environments.
- Exposure to DevSecOps and CI/CD security integrations.
- Excellent troubleshooting and stakeholder management skills.
This is a Security Tools Administration & Maintenance role. Candidates with strong hands-on experience in managing, configuring, and maintaining AppScan and related security platforms will be preferred. Development, code remediation, and vulnerability assessment experience are considered additional advantages but are not primary requirements.
DevSecOps Engineer · Diverse Lynx India