{"id":152114,"url":"https://alion.io/job/metro-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":4153,"name":"METRO","domain":"metro.com","url":"https://alion.io/company/metro","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":121,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"C++","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"GitHub","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP SAMM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-07-22T08:58:07Z","employer_posted_date":"2026-07-22","last_verified_at":"2026-10-17T03:21:43Z","board_verified":true,"closed_at":null,"days_open":86,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":86},"description":"About us:\nMetro Global Solution Center (MGSC) is internal solution partner for METRO, a €31.6 Billion international wholesaler with operations in 32 countries through 625 stores & a team of 85,000 people globally. Metro operates in a further 10 countries with its Food Service Distribution (FSD) business and it is thus active in a total of 34 countries.\nMGSC, location wise is present in Pune (India), Düsseldorf (Germany) and Szczecin (Poland). We provide HR, Finance, IT & Business operations support to 31 countries, speak 24+ languages and process over 18,000 transactions a day. We are setting tomorrow’s standards for customer focus, digital solutions, and sustainable business models. For over 10 years, we have been providing services and solutions from our two locations in Pune and Szczecin. This has allowed us to gain extensive experience in how we can best serve our internal customers with high quality and passion. We believe that we can add value, drive efficiency, and satisfy our customers.\nWebsite: https://www.metro-gsc.in\nCompany Size: 1050-1100\nHeadquarters: Pune, Maharashtra, India\nType: Privately Held\nInception: 2011\n Embed application security controls into CI/CD pipelines to provide accurate, actionable, and timely feedback to engineers.\nSupport the investigation, remediation, and validation of application security findings including the management of exceptions and false positives.\nConduct targeted code reviews in partnership with engineers and platform teams to identify security issues early and improve coding practices\nImplement and maintain security controls, integrations, and automations required to ensure security and privacy by default across applications and their APIs.\nPerform threat modeling exercises to identify abuse cases, threat actors, and appropriate preventative and detective controls\nParticipate actively in the engineer community led by METRO Corporate Information Security to define best practices, align way-of-working, prioritize and execute on the needed activities across application and API platforms.\n Security experience in one, or more of the following:\nApplication security experience identifying, investigating, and remediating vulnerabilities across all stages of the SDLC.\nHands on experience writing and reviewing code and contributing to developer workflows such as design reviews, planning, and implementation.\nProven experience designing, implementing, and improving security tooling and CI/CD integrations, with focus on reducing noise and prioritizing risk.\nStrong focus on developer experience with the ability to communicate security issues clearly.\nFamiliarity with application architectures, including monolithic and microservice based designs.\nSolid understanding of frameworks such as OWASP Top 10, SAMM, ASVS, and FIRST principles\nComfort working across one or more programming languages such as Java, C++, Python, JavaScript or similar.\nAnd:\n Experience with LLMs, AI, and agentic coding platforms such as Github Co-pilot, Gemini, or Claude Code.\nProven experience as a security subject-matter expert, mentoring and raising awareness to security mandates.","description_format":"text","description_chars":3143,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Wholesale"],"lifecycle":[{"event":"open","at":"2026-07-22T08:58:07Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.215,"p_room":0.28,"age_days":86,"expected_fill_days":35,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/metro-devsecops-engineer","json_url":"https://alion.io/job/metro-devsecops-engineer.json","meta":{"generated_at":"2026-10-17T05:50:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7924,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4153},"rest":"https://alion.io/mcp/rest/get_company?id=4153"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmetro-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmetro-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmetro-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/metro-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmetro-devsecops-engineer"}]}