Associate Systems Engineer

Role: Associate System Engineer Location: Mumbai(Preferred)/Bangalore Schedule: Hybrid Shift: Rotational Introduction to the Job: As a DevSecOps engineer, you will provide technically skilled in the DevSecOps areas of Vulnerability Scanning, Certificate Management, Password Policy Management, Infrastructure As code for Cloud Resource Provisioning, Data Analysis of security monitoring outputs, coordination of Remediation Patching, and other daily Security and Compliance efforts. Additionally, you will assist in developing an automated security framework for robust deployment tools and processes, leveraging various scripting languages and open-source solutions. Some of the things you will be doing: Familiarity with DevSecOps ecosystem: Terraform, Ansible, GitHub, Jenkins, Azure DevOps, SAST, DAST & SCA Terraform, Ansible and AWS, Azure Architecture, Network and Security Certifications. Familiarity with API Security, Container Security, AWS and Azure Cloud Security Knowledge of Cloud Resource Provisioning, Cloud Network and Architecture, Cloud Standards and Policies. Experience with AWS and Azure Policy, Configuration, and Security Management tools. Experience with security automation, Cloud resource provisioning. Expertise in programming and scripting languages like Python, NodeJS, SQL query, bash, powershell, and Java. Experience with Vulnerable Code remediation. Experience with Vulnerability Management and executive reporting using PowerBI. What technical skills, experience, and qualifications do you need? Prior experience (3-5 years) in a Production Engineering or related position. Experience working with Developers, DevOps, and Engineering teams in a dynamic environment to promote/implement the DevSecOps program throughout the organization. Experience coordinating and performing vulnerability assessments through the use of automated and manual tools (SAST, DAST, IAST etc). Ability to review and analyze vulnerability data to identify security risks to the organization's network, infrastructure, and application's and determine any reported vulnerabilities that are false positives. Capability to prepare security vulnerability and risk management reports for management. Leadership and teaming skills to coordinate remediation of vulnerabilities within established timeframes. Experience generating and providing executive reports for vulnerability management across DevSecOps Security Products. Proficiency in Java Programming, Bash, Powershell, Python, Terraform or other scripting languages. Familiarity with Information Security frameworks/standards (i.e. CIS, NIST, RFC2196, etc). Comprehension in the security areas of Key Management Systems, Certificate Management, Encryption, Penetration Testing, Vulnerability Scanning, Security and Monitoring tools, etc. Experience configuring, implementing, and leveraging computer security and networking diagnostic/monitoring tools. Knowledge of Windows and Linux patch management and related information security functions (authentication, encryption, iptables, SSL, Ciphers, etc) Ability to work with APIs and Plugins to integrate security tools into established CI/CD pipelines. Support code reviews across all code platforms Manage security integration into the SDLC process at CSC Help evolve CSC’s application security functions and services Responsible for Security bug intake and remediation process for CSC Responsible for leading the remediation of application vulnerability scanning and penetration testing Manage integration with Static Application Security Testing (SAST) Software Composition Analysis (SCA), Dynamic Application Security Testing (DAST), Infrastructure as a Code (IaC) scanning, Secret Scanning, and Container Image scanning. Identify security exposures and develop mitigation plans Identify, report and fix technical debt. Assist Manager of Application Security on all application security activities Become a representative for the CSC Information Security program Be productive and participate in security initiatives with minimal supervision. Becomes a subject matter expert for security solutions within the CSC platform, knowledge of SANS 25 and Owasp Top 10. Be able to act as a mentor for junior dev, devops and security engineers Use the tools and technologies used throughout CSC InfoSec. Own and document medium/large epics and follow through until completion. Present security solutions to a larger CSC audience. Troubleshoot issues and performance bottlenecks. Follow Security best practices. Collaborate with cross functional teams (Engineering, DevOps, Product) while carrying out day-to-day tasks. Participate in requirement gathering with Product/SRE/InfraServices. Collaborate with cross Business Unit teams (CLS, DBS, Corp Tax, TBS) on implementing standardized security solutions and integrations. Participate in inner sourcing/procurement initiatives within CSC. At CSC®, we’re always looking ahead, finding ways to innovate, challenge the status quo, and anticipate the needs of our clients. We exceed expectations by adapting client ambitions and goals as our own. This Fierce Client Spirit has helped us adapt and create solutions that have enabled businesses to run smoother and smarter for more than 125 years. It’s also the reason we’re the trusted partner of many of the world’s most successful organizations. CSC is committed to attracting, developing, and retaining talented people whose values align with ours. We empower our colleagues to bring the right solutions to market to meet client demand. That’s why we are the leading provider of business administration and compliance solutions. CSC is a great place to work with smart and dedicated people. We have won several employer recognition awards, including Top Workplace USA, Great Places to Work India, and Built In’s Best Places to Work. We offer fulfilling work and career opportunities. Most positions are filled with internal moves and employee referrals. Employees are eligible for Success Sharing, bonuses, or commission plans based on role and individual performance. CSC offers a competitive and comprehensive benefits package that includes annual leave, tuition reimbursement, referral bonuses, and more. As business needs allow, CSC offers hybrid or remote work schedules in alignment with local regulations. Specific details for this position will be discussed during the interview process. CSC is a global business, legal, and financial services company based in Wilmington, Delaware, USA, providing knowledge-based solutions to clients worldwide. We have offices and capabilities in over 140 jurisdictions in the Americas, Europe, Asia Pacific, and the Middle East, and more than 8,000 colleagues. We are the business behind business.® Visit our careers site to learn more about CSC and our commitment to our clients, communities, and each other. CSC is committed to creating a feeling of belonging through a diverse and growth-oriented environment where everyone is valued. CSC colleagues have global career opportunities and excellent benefits, including annual success-sharing bonuses or commission plans based on individual performance. To learn more, visit cscglobal.com/service/careers. We offer a range of support to colleagues with disabilities, ensuring people have the necessary resources to thrive in their roles. We encourage candidates to work closely with our talent acquisition partners to convey their specific needs. Our commitment to accessibility reflects our broader dedication to diversity and belonging, CSC only accepts resumes from employment agencies that are part of our approved supplier program. Resumes submitted from other agencies either to talent acquisition, our hiring leaders, employees, or through any other mechanism other than our supplier process, will not be eligible to claim related fees and the submitted resumes will be considered property of CSC. We encourage candidates to apply directly to our website and not through third-party sources. Disclaimer: The information above describes the general nature and level of work performed by employees in this role. It is not intended to describe all duties, responsibilities, and qualifications.