Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com.
Job Description
Profile: Technical Lead (Application Security testing – SAST and SCA)
Location: No location constraints (but preference to Pune/Mumbai)
Band: B3
Experience: 6–8 years
About the role:
We are looking to onboard a Senior Consultant (Application Security testing - SAST and SCA) for GCISO unit.
R͏oles & Responsibilities
• Perform Static Application Security Testing (SAST) across applications (Java, .NET, Node, Angular etc.)
• Perform Software Composition Analysis (SCA) to identify vulnerable open-source components and license risks
• Configure, execute, and optimize SAST/SCA scans; validate findings and remove false positives
• Analyse code-level vulnerabilities and provide clear remediation guidance to developers
• Support integration of SAST/SCA into CI/CD pipelines (DevSecOps) working with DevOps engineering team
• Track vulnerabilities through closure and support remediation
• Deliver secure coding awareness/training sessions to development teams
• Must be well versed with alternative secure coding approaches to mitigate the vulnerabilities across different technologies.
Q͏ualifications
• Bachelor’s degree in a technical field
• 6–8 years of experience in application security / SAST / SCA
• Strong hands-on experience in SAST tools (e.g., Fortify, Checkmarx, Veracode) and SCA tools (e.g., Sonatype, Black Duck, Snyk)
• Good understanding of secure coding practices and OWASP Top 10
• Ability to analyse code (Java, .NET, JavaScript, etc.) and identify vulnerabilities
• Experience in scan configuration, tuning, and false positive reduction
• Familiarity with CI/CD pipelines and DevSecOps
• Good communication skills with ability to deliver developer trainings
• Preferred: Prior development experience in any coding language
Good to have Certifications:
- CEH, GPEN, CISSP, or similar
Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions.
Applications from people with disabilities are explicitly welcome.