Senior Consultant; Application Security testing - SAST and SCA); ITI Global

Senior Consultant (Application Security Testing - SAST and SCA) (ITI Global)

Wipro Limited is a leading technology services and consulting company focused on building innovative solutions that address clients' most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world.

Job Description:

Technical Lead (Application Security Testing – SAST and SCA) Band: B3

About the role:

We are looking to onboard an Application Security Testing lead for SAST & SCA

Roles & Responsibilities:

• Perform Static Application Security Testing (SAST) across applications (Java,.NET, Node, Angular etc.)
• Perform Software Composition Analysis (SCA) to identify vulnerable open-source components and license risks
• Configure, execute, and optimize SAST/SCA scans; validate findings and remove false positives
• Analyse code-level vulnerabilities and provide clear remediation guidance to developers
• Support integration of SAST/SCA into CI/CD pipelines (Dev Sec Ops ) working with Dev Ops engineering team
• Track vulnerabilities through closure and support remediation
• Deliver secure coding awareness/training sessions to development teams
• Must be well versed with alternative secure coding approaches to mitigate the vulnerabilities across different technologies.

Qualifications:

• Bachelor's degree in a technical field
• 6–8 years of experience in application security / SAST / SCA
• Strong hands-on experience in SAST tools (e.g., Fortify, Checkmarx, Veracode) and SCA tools (e.g., Sonatype, Black Duck, Snyk)
• Good understanding of secure coding practices and OWASP Top 10
• Ability to analyse code (Java,.NET, JavaScript, etc.) and identify vulnerabilities
• Experience in scan configuration, tuning, and false positive reduction
• Familiarity with CI/CD pipelines and Dev Sec Ops
• Good communication skills with ability to deliver developer trainings
• Preferred:
  Prior development experience in any coding language

Good to have

Certifications:

• CEH, GPEN, CISSP, or similar

The expected compensation for this role ranges from $60,000.00 to $. Final compensation will depend on various factors, including your geographical location, minimum wage obligations, skills, and relevant experience. Based on the position, the role is also eligible for Wipro's standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options.

Wipro provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Applications from veterans and people with disabilities are explicitly welcome.