{"id":61533,"url":"https://alion.io/job/kyndryl-applsec-devsecops-l3","title":"Application Security with DevSecOps","company":{"id":91,"name":"Kyndryl","domain":"kyndryl.com","url":"https://alion.io/company/kyndryl","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":172,"ghost_share":0.006,"stale_share":0.733,"repost_share":0.023,"time_to_fill_p50_days":27,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Noida, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17000,"max_usd":37000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Burp Suite","optional":false},{"name":"Charles Proxy","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"Fortify","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Jenkins","optional":false},{"name":"MobSF","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Postman","optional":false},{"name":"Power BI","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"SonarQube","optional":false},{"name":"Splunk","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"Veracode","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-08-18T00:00:00Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-10-15T03:33:11Z","board_verified":true,"closed_at":null,"days_open":59,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":59},"description":"Who We Are\nAt Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.\n The Role\nWe are seeking a seasoned Application Security Subject Matter Expert (SME) with 8+ years of experience across multiple facets of application security including SAST, DAST, SCA, Container security, DevSecOps integration, and threat modelling. The SME will provide leadership in manual security testing, vulnerability validation, secure design reviews, and mentoring, while ensuring testing quality, SLA adherence, and alignment with business risk priorities.\nRoles & Responsibilities:\nThreat Modelling & Advanced Testing\nLead threat modeling workshops for critical applications and services.\n\nPerform manual security testing to assess business logic, abuse cases, and advanced attack scenarios.\n\nValidate and exploit high-risk findings from DAST tools such as Fortify WebInspect to confirm impact and reduce false positives.\n\nStrong understanding of security integration for application and infra level security assessments in DevSecops pipeline\n\nUnderstanding of Containers, Microservices based applications security considerations\n\nContainer security assessment knowledge\n\nKnowledge of cloud security aspects is also preferred\n\nVulnerability Triage & Remediation\nProvide second-level triage of critical and high-severity vulnerabilities identified across SAST and DAST.\n\nConduct in-depth discussions with application stakeholders to review critical findings, false positives, and exception requests.\n\nGuide application teams in remediation planning, secure design alternatives, and architecture-level mitigations.\n\nDAST & SAST Governance\nConduct DAST tool coverage reviews and evaluate feature utilization to maximize effectiveness.\n\nEnsure SAST and DAST testing, reporting, and remediation SLAs are consistently met.\n\nTrack security metrics (coverage, SLA compliance, MTTR) and present insights to AppSec leadership.\n\nCollaboration & Mentorship\nCollaborate with development, DevOps, and product teams to embed AppSec controls in CI/CD pipelines.\n\nMentor and guide junior analysts (L1/L2) in vulnerability triage, secure coding, and manual testing techniques.\n\nContribute to security automation opportunities, improving efficiency of AppSec processes and tooling.\n\nStakeholder Engagement\nAct as a trusted advisor and escalation point for application security issues.\n\nLead second-level report discussions with business and technical stakeholders for critical vulnerabilities.\n\nSupport secure design and architecture discussions for new initiatives and high-risk projects.\n\nTools & Technologies\nSAST: Fortify SCA, Checkmarx, SonarQube, Veracode\n\nDAST: Fortify WebInspect, Burp Suite Pro, OWASP ZAP, AppScan, Netsparker\n\nThreat Modeling: Microsoft Threat Modeling Tool, OWASP Threat Dragon, custom frameworks\n\nDevSecOps: Jenkins, GitLab CI, GitHub Actions, Azure DevOps integration for security scanning\n\nContainer security : assessments using Palo Alto Prisma Cloud, Trivy, Wiz etc\n\nSupporting Tools: Postman, Charles Proxy, MobSF (mobile), Splunk/Power BI for reporting\n\nYour Future at Kyndryl\nWhen you join Kyndryl, you're not just joining a company - you're entering a space of opportunities. Our partnerships with industry alliances and vendors mean you'll have access to skilling and certification programs needed to excel in Security & Resiliency, while simultaneously supporting your personal growth. Whether you envision your career path as a technical leader within cybersecurity or transition into other technical, consulting, or go-to-market roles - we’re invested in your journey.\nWho You Are\nWho You Are\nYou’re good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you’re open and borderless - naturally inclusive in how you work with others.\nRequired Professional Experience:\n8+ years of experience in Application Security spanning SAST, DAST, manual testing, and secure SDLC.\n\nProven experience in threat modeling, risk assessments, and secure design reviews.\n\nStrong knowledge of OWASP Top 10, API Security Top 10, SANS Top 25, CWE, and emerging threat vectors.\n\nHands-on expertise in integrating security tools within DevSecOps pipelines.\n\nExcellent stakeholder communication and leadership skills.\n\nPreferred Professional Experience:\nOSWE / OSCP / OSEP (advanced exploit and web testing)\n\nCISSP / CSSLP (for security leadership & secure SDLC expertise)\n\nGWAPT / GWEB (web application security)\n\nCloud security certs (CCSP, AWS Security Specialty, Azure SC-100) - must have one cloud security certification\n\nBachelor's degree in Computer Science, Information Technology, or related field.\n\nBeing You\nThe “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging - being a valued, respected, trusted member of the team - is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.\nWhat You Can Expect\nYour career with us isn’t just a job-it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health-because we know that when you feel your best, you do your best. \nFrom your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute-you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.\nWe’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities-from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success. \nWe want you to thrive here-and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.\nGet Referred!\nIf you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.","description_format":"text","description_chars":7680,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps","IT Infrastructure & Networking Services","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-08-18T00:00:00Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.413,"p_room":0.28,"age_days":59,"expected_fill_days":27,"reasons":["conf:26","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/kyndryl-applsec-devsecops-l3","json_url":"https://alion.io/job/kyndryl-applsec-devsecops-l3.json","meta":{"generated_at":"2026-10-16T09:07:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7245,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":91},"rest":"https://alion.io/mcp/rest/get_company?id=91"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkyndryl-applsec-devsecops-l3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkyndryl-applsec-devsecops-l3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkyndryl-applsec-devsecops-l3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kyndryl-applsec-devsecops-l3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkyndryl-applsec-devsecops-l3"}]}