{"id":3273181,"url":"https://alion.io/job/tata-consultancy-services-devsecops-engineer-2","title":"DevSecOps Engineer","company":{"id":222,"name":"Tata Consultancy Services","domain":"tcs.com","url":"https://alion.io/company/tata-consultancy-services","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"A","score":100,"open_postings":227,"ghost_share":0,"stale_share":0,"repost_share":0.009,"time_to_fill_p50_days":3,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":61000,"max_usd":115000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":53},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Veracode","optional":false},{"name":"Checkmarx","optional":true},{"name":"Fortify","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Defender for Cloud","optional":true},{"name":"Prisma Cloud","optional":true},{"name":"Snyk","optional":true},{"name":"SonarQube","optional":true}],"status":"live","first_seen_at":"2026-10-26T12:40:20Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-28T07:42:56Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Role: Engineer. Skills: Azure, DevOps. Experience: 5 - 20 Years\nInclusion without Exception\nTata Consultancy Services (TCS) is an equal opportunity employer, and\nembraces diversity in race, nationality, ethnicity, gender, age, physical\nability, neurodiversity, and sexual orientation, to create a workforce that\nreflects the societies we operate in. Our continued commitment to Culture and\nDiversity is reflected in our people stories across our workforce and implemented\nthrough equitable workplace policies and processes.\nTata Consultancy Services (BSE: 532540, NSE: TCS) is the\ntechnology partner of choice for industry-leading organizations worldwide.\nSince its inception in 1968, TCS has upheld the highest standards of\ninnovation, engineering excellence and customer service.\nIt has set an aspiration to become the world's largest\nAI-led technology services company and is enabling its clients to transform\nthemselves across the full AI stack, from infrastructure to intelligence.\nRooted in the heritage of the Tata Group, TCS is focused on\ncreating long term value for its clients, its investors, its employees, and the\ncommunity at large. With a highly skilled workforce spread across 56 countries\nand 194 service delivery centers across the world, the company has been\nrecognized as a top employer in six continents. With the ability to rapidly\napply and scale new technologies, the company has built long term partnerships\nwith its clients. Many of these relationships have endured into decades and\nnavigated every technology cycle, from mainframes in the 1970s to artificial\nintelligence today.\nRole Description\nImplement and manage\nApplication Security Posture Management (ASPM) practices across enterprise\napplications. Administer and optimize Veracode for Static Application Security\nTesting (SAST), Dynamic Application Security Testing (DAST), Software\nComposition Analysis (SCA), and security policy management. Integrate security\nscanning tools into CI/CD pipelines (Azure DevOps, GitHub, Jenkins,\nGitLab).Perform application security assessments, vulnerability triage, risk\nanalysis, and remediation tracking. Establish secure coding standards and\nprovide guidance to development teams on vulnerability remediation. Monitor\napplication security metrics, compliance dashboards, and posture management\nreports. Drive vulnerability management activities, including risk\nprioritization, exception handling, and remediation governance. Collaborate\nwith architects and engineering teams to embed security controls throughout the\nSDLC. Support compliance requirements aligned\nwith OWASP Top 10, NIST, CIS Controls, ISO 27001, and industry regulations. Automate\nsecurity processes using scripting and Infrastructure-as-Code (IaC) security\npractices.\nWe are seeking an experienced DevSecOps Engineer to drive secure software\ndevelopment practices and strengthen the organizations Application Security\nPosture Management (ASPM) capabilities. The candidate will be responsible for\nintegrating security across the SDLC, managing application security assessments\nusing Veracode, automating security controls within CI/CD pipelines, and\ncollaborating with development, infrastructure, and security teams to remediate\nvulnerabilities and improve overall security posture\n.\nRequired Skills & Qualifications\nyears of experience in DevSecOps, Application\nSecurity, or Secure SDLC. Strong\nhands-on experience with Veracode (SAST, DAST, SCA, Policy Scanning).Experience\nwith Application Security Posture Management (ASPM) platforms and vulnerability\nmanagement processes. Knowledge of OWASP Top 10, secure coding practices, and\nthreat modelling. Experience integrating security tools within Azure DevOps,\nGitHub Actions, Jenkins, GitLab CI/CD. Proficiency\nin scripting languages such as Python, PowerShell, Bash. Experience with container security (Docker,\nKubernetes) and cloud security (Azure/AWS/GCP).Familiarity with dependency\nscanning, secrets scanning, and Infrastructure-as-Code security tools. Strong analytical, troubleshooting, and\nstakeholder communication skills Preferred Qualifications Certifications such\nas CSSLP, CISSP, CEH, Azure Security Engineer (AZ-500), GIAC, or Veracode\ncertifications. Experience with tools\nsuch as SonarQube, Checkmarx, Fortify, Snyk, Prisma Cloud, or Microsoft\nDefender for Cloud. Knowledge of threat\nintelligence and security monitoring practices. One-Line Skill Set Summary Application\nSecurity | Veracode | ASPM | SAST/DAST/SCA | Secure SDLC | CI/CD Security |\nAzure DevOps | OWASP | Vulnerability Management | Cloud & Container\nSecurity.\nTCS does not use\nartificial intelligence tools for candidate screening or evaluation. This post\nis for a current vacancy. The hiring process includes an initial screening,\nfollowed by a technical evaluation and managerial discussion.\nTata Consultancy Services Canada Inc. is\ncommitted to meeting the accessibility needs of all individuals in accordance\nwith the Accessibility for Ontarians with Disabilities Act (AODA) and the\nOntario Human Rights Code (OHRC). Should you require accommodation during the\nrecruitment and selection process, please inform Human Resources.\nThank you for your interest in\nTCS. Candidates that meet the qualifications for this position will be\ncontacted within a 2-week period. We invite you to continue to apply for other\nopportunities that match your profile.","description_format":"text","description_chars":5374,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","IT Consulting & Digital Transformation","Systems Integrators","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-26T12:40:20Z"}],"visa":[],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.873,"p_room":0.9,"age_days":1,"expected_fill_days":3,"reasons":["conf:3","velocity","win:mid","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/tata-consultancy-services-devsecops-engineer-2","json_url":"https://alion.io/job/tata-consultancy-services-devsecops-engineer-2.json","meta":{"generated_at":"2026-10-28T08:47:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11405,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":222},"rest":"https://alion.io/mcp/rest/get_company?id=222"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftata-consultancy-services-devsecops-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftata-consultancy-services-devsecops-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftata-consultancy-services-devsecops-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tata-consultancy-services-devsecops-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftata-consultancy-services-devsecops-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3273181}},{"tool":"search_jobs","arguments":{"company":"tcs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3273181},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}