{"id":3450715,"url":"https://alion.io/job/persistent-systems-lead-application-security-devsecops-architect","title":"Lead Application Security & DevSecOps Architect","company":{"id":59479,"name":"Persistent Systems","domain":"persistent.com","url":"https://alion.io/company/persistent-systems","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zwayam","truth_index":{"grade":"A","score":87,"open_postings":122,"ghost_share":0.049,"stale_share":0.352,"repost_share":0.098,"time_to_fill_p50_days":43,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":52000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Aqua Security","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"Docker","optional":false},{"name":"Fortify","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Mend","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Veracode","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-19T12:39:07Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-04T17:57:30Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"About Persistent\nWe are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 18 of the Fortune 50 companies, 7 of the 10 top US banks, 9 of the 10 technology companies, and numerous innovators across the healthcare ecosystem.\nOur disruptor’s mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We have delivered 26 sequential quarters of growth with $487.6M in Q4 FY26 revenue, up 7.8% Q-o-Q and 20.0% Y-o-Y. Our 29,500+ global team members, located in 21 countries, have been instrumental in helping the market leaders transform their industries. We received five awards at the ISG (Information Services Group) Provider Lens™ Awards 2026 and, for the second year in a row, were awarded the Growth Honor of the Year at the Everest Group Elevate 2026.\nAbout Position:\nWe are seeking an experienced Lead Application Security & DevSecOps Architect to drive enterprise-wide application security and DevSecOps initiatives across the software development lifecycle. This role is responsible for embedding security controls into design, development, testing, deployment, and operational processes while enabling engineering teams to build secure-by-design applications. The ideal candidate will lead application security programs, establish Secure SDLC standards, implement DevSecOps practices, and drive risk-based security governance across cloud-native and enterprise application environments.\nRole: Lead Application Security & DevSecOps Architect\nLocation: Pune\nExperience: 12 to 15 Years\nJob Type: Full-Time Employment\nWhat You'll Do:\nDefine and implement enterprise Secure SDLC standards, security policies, and application security governance frameworks.\nLead threat modeling, secure architecture reviews, design assessments, and security risk evaluations for critical applications.\nEstablish and operationalize DevSecOps practices across software delivery pipelines and cloud environments.\nIntegrate SAST, DAST, SCA, secret scanning, container security, API security, and Infrastructure as Code (IaC) security testing into CI/CD pipelines.\nDesign and enforce security gates, risk-based controls, exception management processes, and remediation workflows.\nPartner with engineering teams to prioritize, triage, and remediate security vulnerabilities based on business risk.\nConduct application security assessments, code reviews, penetration testing reviews, and security validation activities.\nDefine secure coding standards aligned with OWASP Top 10, CWE, NIST Secure Software Development Framework (SSDF), and industry best practices.\nImplement security controls for APIs, microservices, cloud-native applications, containers, and Kubernetes environments.\nDrive developer security awareness programs, secure coding workshops, and security champion initiatives.\nEstablish security metrics, KPIs, dashboards, and executive reporting for application security programs.\nCollaborate with architecture, cloud, infrastructure, DevOps, compliance, and risk teams to ensure end-to-end security integration.\nEvaluate and implement modern application security and DevSecOps tooling across the organization.\nLead security governance forums, design reviews, risk assessments, and continuous improvement initiatives.\nMentor security engineers, DevSecOps specialists, and application development teams on security best practices.\nExpertise You'll Bring:\n12-15 years of experience in Application Security, Product Security, DevSecOps, Secure Engineering, or Cybersecurity Architecture.\nExtensive hands-on experience establishing and managing enterprise Application Security and DevSecOps programs.\nStrong expertise in Secure SDLC methodologies, threat modeling, security architecture reviews, and secure design principles.\nDeep knowledge of OWASP Top 10, CWE/SANS Top 25, MITRE ATT&CK, ASVS, NIST SSDF, and secure coding best practices.\nExperience integrating security testing tools such as Checkmarx, Veracode, Fortify, SonarQube, Snyk, Black Duck, Mend, Prisma Cloud, Aqua Security, or similar solutions.\nStrong understanding of SAST, DAST, IAST, Software Composition Analysis (SCA), API Security Testing, Container Security, and IaC Security.\nExperience implementing security controls within CI/CD platforms such as Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins, or Harness.\nExpertise securing cloud-native applications across AWS, Azure, and GCP environments.\nStrong knowledge of API security, OAuth 2.0, OpenID Connect, JWT, microservices security, and Zero Trust principles.\nExperience securing Kubernetes, Docker containers, service meshes, and cloud-native workloads.\nHands-on experience with penetration testing methodologies, vulnerability management programs, and remediation lifecycle management.\nAbility to define security policies, governance standards, risk acceptance processes, and security exception frameworks.\nProven track record of influencing engineering leadership and driving security adoption across large enterprise environments.\nStrong leadership, stakeholder management, communication, mentoring, and presentation skills.\nBachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.\nCertifications such as CISSP, CSSLP, CCSP, Azure Security Engineer, AWS Security Specialty, GWAPT, GWEB, or certified DevSecOps credentials are highly desirable.\nBenefits:\nCompetitive salary and benefits package\nCulture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications\nOpportunity to work with cutting-edge technologies\nEmployee engagement initiatives such as project parties, flexible work hours, and Long Service awards\nAnnual health check-ups\nInsurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents\nValues-Driven, People-Centric & Inclusive Work Environment:\nPersistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.\nWe support hybrid work and flexible hours to fit diverse lifestyles.\nOur office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.\nIf you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment\nLet's unleash your full potential at Persistent -persistent.com/careers\n\"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.\"","description_format":"text","description_chars":7217,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Growth opportunities","Hybrid work","Insurance coverage"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps","Health Care","Information Technology"],"lifecycle":[{"event":"open","at":"2026-10-29T10:49:38Z"}],"visa":[],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.887,"p_room":0.9,"age_days":15,"expected_fill_days":43,"reasons":["conf:2","velocity","win:mid","comp:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/persistent-systems-lead-application-security-devsecops-architect","json_url":"https://alion.io/job/persistent-systems-lead-application-security-devsecops-architect.json","meta":{"generated_at":"2026-11-04T21:13:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32877,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59479},"rest":"https://alion.io/mcp/rest/get_company?id=59479"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpersistent-systems-lead-application-security-devsecops-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpersistent-systems-lead-application-security-devsecops-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpersistent-systems-lead-application-security-devsecops-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/persistent-systems-lead-application-security-devsecops-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpersistent-systems-lead-application-security-devsecops-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3450715}},{"tool":"search_jobs","arguments":{"company":"persistent.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3450715},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}