{"id":2164127,"url":"https://alion.io/job/capgemini-security-consultant-penetration-testing-devsecops-2","title":"Security Consultant - Penetration Testing & DevSecOps","company":{"id":145,"name":"Capgemini","domain":"capgemini.com","url":"https://alion.io/company/capgemini","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"B","score":81,"open_postings":1748,"ghost_share":0,"stale_share":0.761,"repost_share":0.001,"time_to_fill_p50_days":27,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":104000,"max_usd":183000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":297},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Jenkins","optional":false},{"name":"Kali Linux","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Metasploit","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Red Teaming","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Veracode","optional":false},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-09-17T11:20:01Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-12T06:06:29Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.\nLocation\nThis is a remote role based in the US.\nAbout The Job You're Considering\nWe are seeking a Senior Security Consultant - Penetration Testing & DevSecOps with 5-8 years of cybersecurity experience and strong expertise in application penetration testing, offensive security, DevSecOps, SSDLC, and vulnerability management. The role focuses on conducting security assessments across applications, APIs, cloud environments, and CI/CD pipelines, while collaborating with development and engineering teams to embed security throughout the software development lifecycle. The ideal candidate combines strong technical skills, a proactive security mindset, and the ability to communicate risks effectively to both technical and business stakeholders.\nYour Role\nPenetration Testing & Offensive Security\nPerform manual and automated penetration testing of web applications, APIs, mobile applications, cloud environments, and supporting infrastructure.\nConduct reconnaissance, vulnerability discovery, exploitation, and post-exploitation activities following industry-standard methodologies such as OWASP, PTES, NIST, and MITRE ATT&CK.\nIdentify security vulnerabilities, validate exploitability, assess business risk, and provide actionable remediation recommendations.\nExecute security assessments against modern architectures including microservices, containers, Kubernetes, and cloud-native applications.\nDevelop proof-of-concepts to demonstrate security weaknesses and attack paths.\nPrepare detailed technical reports and executive summaries for customers and stakeholders.\nDevSecOps & Secure SDLC\nIntegrate security controls and testing into CI/CD pipelines.\nImplement and manage SAST, DAST, SCA, IaC, Container Security, Secrets Detection, and API Security testing solutions.\nCollaborate with development teams to remediate vulnerabilities and adopt secure coding practices.\nParticipate in security architecture reviews, threat modeling exercises, and secure design assessments.\nAutomate security testing and compliance validation within DevOps toolchains.\nDevelop security guardrails and policy-as-code capabilities to improve software security posture.\nVulnerability Management & Security Engineering\nPerform vulnerability triage, risk prioritization, and remediation tracking.\nSupport continuous security monitoring and risk assessment activities.\nAnalyze emerging threats, attack techniques, and security trends to improve testing methodologies.\nAssist in development of security standards, procedures, and best practices.\nWork with engineering, cloud, and infrastructure teams to enhance organizational security posture.\nStakeholder Engagement\nPresent findings and recommendations to developers, architects, engineering teams, and leadership.\nProvide security consulting throughout the software development lifecycle.\nYour Skills And Experience\nEducation\nBachelor's degree in Computer Science, Information Security, Engineering, or a related field.\nExperience\n5-8 years of hands-on cybersecurity experience.\nMinimum 3+ years of experience conducting application and API penetration testing.\nExperience implementing or supporting DevSecOps initiatives within CI/CD environments.\nTechnical Skills\nStrong understanding of:\nWeb Application Security\nAPI Security\nSecure SDLC\nOWASP Top 10\nOWASP API Top 10\nMITRE ATT&CK\nThreat Modeling\nVulnerability Management\nHands-on experience with:\nBurp Suite Professional\nNmap\nNessus / Qualys / Tenable\nMetasploit\nKali Linux\nCheckmarx\nVeracode\nSnyk\nSonarQube\nGitHub Actions / Azure DevOps / Jenkins\nDesired Qualifications\nCertifications :\nOne or more of the following certifications:\nOSCP (Preferred)\nCRTO\nPNPT\nCEH\nGWAPT\nGPEN\nCISSP\nCCSP\nAzure Security Engineer Associate\nAWS Security Specialty\nAdditional Skills :\nExperience with container security (Docker, Kubernetes).\nExperience conducting cloud penetration testing.\nUnderstanding of Infrastructure as Code (Terraform, CloudFormation).\nFamiliarity with Red Team methodologies and adversary simulation.\nExperience with AI/LLM security testing is a plus.\nExposure to Zero Trust Architecture and Secure-by-Design principles.\nExcellent communication, consulting, and stakeholder management skills.\nThe base compensation range for this role in the posted location is: $70,176- $170,040.\nCapgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.\nThe actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.\nThese may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.\nIt is not typical for candidates to be hired at or near the top of the posted compensation range.\nIn addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.\nCapgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:\nPaid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave\nMedical, dental, and vision coverage (or provincial healthcare coordination in Canada)\nRetirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)\nLife and disability insurance\nEmployee assistance programs\nOther benefits as provided by local policy and eligibility\nImportant Notice: Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini’s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.\nDisclaimers\nCapgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.\nThis is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.\nPlease be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.\nClick the following link for more information on your rights as an Applicant in the United States. http://www.capgemini.com/resources/equal-employment-opportunity-is-the-law\nCapgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.","description_format":"text","description_chars":9439,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Application Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-10-09T09:02:16Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2,076 · green card filings: 82","filings_12m":2076,"filings_prev_12m":2803,"green_card_filings_12m":82,"median_offered_wage_usd":132120,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":132}],"liveness":{"score":42,"band":"fade","label":"Fading","p_open":1,"p_active":0.566,"p_room":0.75,"age_days":24,"expected_fill_days":27,"reasons":["conf:0","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/capgemini-security-consultant-penetration-testing-devsecops-2","json_url":"https://alion.io/job/capgemini-security-consultant-penetration-testing-devsecops-2.json","meta":{"generated_at":"2026-10-12T09:51:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15092,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":145},"rest":"https://alion.io/mcp/rest/get_company?id=145"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcapgemini-security-consultant-penetration-testing-devsecops-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcapgemini-security-consultant-penetration-testing-devsecops-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcapgemini-security-consultant-penetration-testing-devsecops-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/capgemini-security-consultant-penetration-testing-devsecops-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcapgemini-security-consultant-penetration-testing-devsecops-2"}]}