DevSecOps Engineer

Metro Global Solution Center Pvt. Ltd. · Pune

Source and collection record

Last observed by our collector: 8 October 2026 at 11:46 pm IST. This is not a manual review or a confirmation from the employer.

Employer requisition: 7219901f-c888-49b6-be13-53468f92b0eb

Job type and experience labels are automated discovery categories. The employer determines eligibility. Original experience wording was not retained separately; check the current employer page.

How sourcing and classification work · Report a discrepancy

Your application evidence checklist

Mark the statements you can support after reading the employer source. This checklist stays on this page; it does not score your eligibility or submit an application.

Collected minimum qualification: Security experience in one, or more of the following: Application security experience identifying, investigating, and remediating vulnerabilities across all stages of the SDLC. Hands on experience writing and reviewing code and contributing to developer workflows such as design reviews, planning, and implementation. Proven experience designing, implementing, and improving security tooling and CI/CD integrations, with focus on reducing noise and prioritizing risk. Strong focus on developer experience with the ability to communicate security issues clearly. Familiarity with application architectures, including monolithic and microservice based designs. Solid understanding of frameworks such as OWASP Top 10, SAMM, ASVS, and FIRST principles Comfort working across one or more programming languages such as Java, C++, Python, JavaScript or similar . And: Experience with LLMs, AI, and agentic coding platforms such as Github Co-pilot, Gemini, or Claude Code. Proven experience as a security subject-matter expert, mentoring and raising awareness to security mandates.Attendance and availability: I checked the employer page for work location, office attendance, start date and duration.Current requisition: I checked the current employer requisition and its application requirements.

0 of 3 checks marked. Keep unresolved requirements as questions for the employer.

Collected role description

Embed application security controls into CI/CD pipelines to provide accurate, actionable, and timely feedback to engineers. Support the investigation, remediation, and validation of application security findings including the management of exceptions and false positives. Conduct targeted code reviews in partnership with engineers and platform teams to identify security issues early and improve coding practices Implement and maintain security controls, integrations, and automations required to ensure security and privacy by default across applications and their APIs. Perform threat modeling exercises to identify abuse cases, threat actors, and appropriate preventative and detective controls Participate actively in the engineer community led by METRO Corporate Information Security to define best practices, align way-of-working, prioritize and execute on the needed activities across application and API platforms. Qualifications: Security experience in one, or more of the following: Application security experience identifying, investigating, and remediating vulnerabilities across all stages of the SDLC. Hands on experience writing and reviewing code and contributing to developer workflows such as design reviews, planning, and implementation. Proven experience designing, implementing, and improving security tooling and CI/CD integrations, with focus on reducing noise and prioritizing risk. Strong focus on developer experience with the ability to communicate security issues clearly. Familiarity with application architectures, including monolithic and microservice based designs. Solid understanding of frameworks such as OWASP Top 10, SAMM, ASVS, and FIRST principles Comfort working across one or more programming languages such as Java, C++, Python, JavaScript or similar . And: Experience with LLMs, AI, and agentic coding platforms such as Github Co-pilot, Gemini, or Claude Code. Proven experience as a security subject-matter expert, mentoring and raising awareness to security mandates. Benefits: People & Culture METRO Global Solution Center India talentacquisition@metro-gsc.in

Collected minimum qualification

Security experience in one, or more of the following: Application security experience identifying, investigating, and remediating vulnerabilities across all stages of the SDLC. Hands on experience writing and reviewing code and contributing to developer workflows such as design reviews, planning, and implementation. Proven experience designing, implementing, and improving security tooling and CI/CD integrations, with focus on reducing noise and prioritizing risk. Strong focus on developer experience with the ability to communicate security issues clearly. Familiarity with application architectures, including monolithic and microservice based designs. Solid understanding of frameworks such as OWASP Top 10, SAMM, ASVS, and FIRST principles Comfort working across one or more programming languages such as Java, C++, Python, JavaScript or similar . And: Experience with LLMs, AI, and agentic coding platforms such as Github Co-pilot, Gemini, or Claude Code. Proven experience as a security subject-matter expert, mentoring and raising awareness to security mandates.