METRO
DevSecOps Engineer
Pune, Maharashtra, India · On-site · Full-time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerMETRO
- LocationPune, Maharashtra, 411014, India
- Work styleOn-site
- Employment typeFull-time
- Employer posted
- Embed application security controls into CI/CD pipelines to provide accurate, actionable, and timely feedback to engineers.
- Support the investigation, remediation, and validation of application security findings including the management of exceptions and false positives.
- Conduct targeted code reviews in partnership with engineers and platform teams to identify security issues early and improve coding practices
- Implement and maintain security controls, integrations, and automations required to ensure security and privacy by default across applications and their APIs.
- Perform threat modeling exercises to identify abuse cases, threat actors, and appropriate preventative and detective controls
- Participate actively in the engineer community led by METRO Corporate Information Security to define best practices, align way-of-working, prioritize and execute on the needed activities across application and API platforms.
Show full description
Security experience in one, or more of the following:
- Application security experience identifying, investigating, and remediating vulnerabilities across all stages of the SDLC.
- Hands on experience writing and reviewing code and contributing to developer workflows such as design reviews, planning, and implementation.
- Proven experience designing, implementing, and improving security tooling and CI/CD integrations, with focus on reducing noise and prioritizing risk.
- Strong focus on developer experience with the ability to communicate security issues clearly.
- Familiarity with application architectures, including monolithic and microservice based designs.
- Solid understanding of frameworks such as OWASP Top 10, SAMM, ASVS, and FIRST principles
- Comfort working across one or more programming languages such as Java, C++, Python, JavaScript or similar.
And:
- Experience with LLMs, AI, and agentic coding platforms such as Github Co-pilot, Gemini, or Claude Code.
- Proven experience as a security subject-matter expert, mentoring and raising awareness to security mandates.
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Work styleOn-site
- Employment typeFull-time
- SeniorityMid level
- Employer posted
- Added to ROLIVA
- Last checked
Skills in this posting
Skills ROLIVA found in the employer’s own description above. A mention is not a requirement.