Security Engineer - SAST & SCA

Job description

**ABOUT SONATA SOFTWARE** Sonata Software, with over $1.2 Billion Revenue, is aleading AI-first Modernization Engineering company, powered by our uniquePlatformation TM framework. Our 6400+ AI Engineers are helpingenterprises transform from systems to intelligent business platforms leveragingpartner ecosystem to drive speed, efficiency and growth. Our bouquet ofModernization Engineering Services with AI -first approach cuts across Cloud,Data, AI, Dynamics, Test Automation, and Managed Services. Sonatas AI-led modernization is enabled by a powerful suiteof proprietary tools and assets. At the core is the **Harmoni.AI** EnterprisePlatform, which includes **Agent Bridge** -a governance andobservability framework; **Agent Builder** -a development toolkit forfungible agents integrated into enterprise systems; and the **AgentMarketplace** -an internal ecosystem for modular, reusable agents. Headquartered in Bengaluru, India, Sonata Software has astrong global presence, including key regions US, UK, India, Malaysia, Mexico,Australia, DACH (Germany/Switzerland) Nordics (Finland). We are a trustedpartner of Fortune 500 companies in Banking, Financial Services and Insurance;Healthcare and Lifesciences; Telecom, Media, and Technology; and Retail,Manufacturing and Distribution space. Deep collaborations with partners like Microsoft, AWS,Salesforce, and Snowflake strengthen our ability to deliver cutting-edge AIsolutions. Our 30+years of partnership with Microsoft, and being part of theelite Microsoft Inner Circle, places us among the top 1% of global Microsoftpartners. Sonata is now among the first companies to earn the **MicrosoftFrontier Partner Badge** Also; Sonata Software is proud to achieve AWSPremier Tier Status in the AWS Partner Network. **Job Title- Security Engineer SAST SCA(Application Security)** **Location- Noida** **Experience : 4 - 7 years** **Mandatory skills : SAST, SCA,** **Job Description :** We are looking for a **Security Engineer SAST SCA** to join our Application Security team. The ideal candidate will have hands-on experience with Static Application Security Testing (SAST) and Software Composition Analysis (SCA) tools, helping development teams identify, prioritize, and remediate application and open-source vulnerabilities throughout the SDLC. **Key Responsibilities** - Perform static code analysis and open-source dependency scanning using SAST and SCA tools. - Analyze and prioritize security findings and work with development teams to drive remediation. - Integrate security scanning into CI/CD pipelines and automate security workflows. - Manage vulnerability lifecycle, reporting, and compliance metrics. - Promote secure coding practices and provide remediation guidance to engineering teams. - Support DevSecOps initiatives and shift-left security adoption. **Required Skills** - 36+ years of experience in Application Security, DevSecOps, or Secure Software Development. - Hands-on experience with **SAST tools** such as **Checkmarx, Fortify, Veracode, or CodeQL** . - Experience with **SCA tools** such as **Snyk, Black Duck, Mend (WhiteSource), Sonatype, or Dependabot** . - Strong understanding of **OWASP Top 10** , secure coding practices, and vulnerability management. - Experience integrating security tools with **GitHub, GitLab, Jenkins, or Azure DevOps** . - Scripting knowledge in **Python, Bash, or PowerShell** . - Excellent communication and collaboration skills. **Preferred Qualifications** - Experience with **SBOM, container security, IaC security** , or cloud-native application security. - Certifications such as **CSSLP, GWAPT, or OSCP** are a plus. **Why join Sonata Software** At Sonata, youll have an outstanding opportunity. Thechance to use your skills and imagination to push the boundaries of whatspossible. To build never seen before solutions to some of the worlds toughestproblems. Youll be challenged, but you will not be alone. Youll be joining ateam of diverse innovators, all driven to go beyond the status quo to craftwhat comes next. Sonata Software is an Equal Opportunity Employer encouragingdiversity in the workplace. All qualified applicants will receive considerationfor employment without regard to race, national origin, gender identity, age,religion, disability, sexual orientation, veteran status, marital status, orany other characteristics protected by law.