Security Engineer – SAST & SCA

Job description

**About Sonata Software** Sonata Software, with over $1.2 Billion Revenue, is a leading AI-first Modernization Engineering company, powered by our unique PlatformationTM framework. Our 6400+ AI Engineers are helping enterprises transform from systems to intelligent business platforms leveraging partner ecosystem to drive speed, efficiency and growth. Our bouquet of Modernization Engineering Services with AI -first approach cuts across Cloud, Data, AI, Dynamics, Test Automation, and Managed Services. Sonata’s AI-led modernization is enabled by a powerful suite of proprietary tools and assets. At the core is the **Harmoni.AI** Enterprise Platform, which includes **Agent Bridge** -a governance and observability framework; **Agent Builder** -a development toolkit for fungible agents integrated into enterprise systems; and the **Agent Marketplace** -an internal ecosystem for modular, reusable agents. Headquartered in Bengaluru, India, Sonata Software has a strong global presence, including key regions US, UK, India, Malaysia, Mexico, Australia, DACH (Germany/Switzerland) & Nordics (Finland). We are a trusted partner of Fortune 500 companies in Banking, Financial Services and Insurance; Healthcare and Lifesciences; Telecom, Media, and Technology; and Retail, Manufacturing and Distribution space. Deep collaborations with partners like Microsoft, AWS, Salesforce, and Snowflake strengthen our ability to deliver cutting-edge AI solutions. Our 30+years of partnership with Microsoft, and being part of the elite Microsoft Inner Circle, places us among the top 1% of global Microsoft partners. Sonata is now among the first companies to earn the **Microsoft Frontier Partner Badge** Also; Sonata Software is proud to achieve AWS Premier Tier Status in the AWS Partner Network. **Job Title- Security Engineer – SAST & SCA (Application Security)** **Location- Noida** **Experience : 4 - 7 years** **Mandatory skills : SAST, SCA,** **Job Description :** We are looking for a **Security Engineer – SAST & SCA** to join our Application Security team. The ideal candidate will have hands-on experience with Static Application Security Testing (SAST) and Software Composition Analysis (SCA) tools, helping development teams identify, prioritize, and remediate application and open-source vulnerabilities throughout the SDLC. **Key Responsibilities** - Perform static code analysis and open-source dependency scanning using SAST and SCA tools. - Analyze and prioritize security findings and work with development teams to drive remediation. - Integrate security scanning into CI/CD pipelines and automate security workflows. - Manage vulnerability lifecycle, reporting, and compliance metrics. - Promote secure coding practices and provide remediation guidance to engineering teams. - Support DevSecOps initiatives and shift-left security adoption. **Required Skills** - 3–6+ years of experience in Application Security, DevSecOps, or Secure Software Development. - Hands-on experience with SAST tools such as Checkmarx, Fortify, Veracode, or CodeQL. - Experience with SCA tools such as Snyk, Black Duck, Mend (WhiteSource), Sonatype, or Dependabot. - Strong understanding of OWASP Top 10, secure coding practices, and vulnerability management. - Experience integrating security tools with GitHub, GitLab, Jenkins, or Azure DevOps. - Scripting knowledge in Python, Bash, or PowerShell. - Excellent communication and collaboration skills. **Preferred Qualifications** - Experience with SBOM, container security, IaC security, or cloud-native application security. - Certifications such as CSSLP, GWAPT, or OSCP are a plus. **Why join Sonata Software?** At Sonata, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build never seen before solutions to some of the world’s toughest problems. You´ll be challenged, but you will not be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next. Sonata Software is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity, age, religion, disability, sexual orientation, veteran status, marital status, or any other characteristics protected by law.