Application Security DevSecOps Specialist
Pubblicato il 18-10-2026 - Ntt Data Europe & Latam in Emilia-Romagna
Who We Are
NTT DATA is one of the world's largest global security service providers, partnering with some of the most recognized security technology brands. We're looking for passionate, curious, and motivated individuals to join our team.
Who We Are
NTT DATA is one of the world's largest global security service providers, partnering with some of the most recognized security technology brands. We're looking for passionate, curious, and motivated individuals to join our team.
What You'll Be Doing
- Implement security measures within CI/CD pipelines to ensure secure software delivery.
- Static Application Security Testing (SAST) tools for analysing source code or binaries.
- Dynamic Application Security Testing (DAST) tools for identifying vulnerabilities in running applications.
- Software Composition Analysis (SCA) tools to detect vulnerabilities in open-source libraries and third-party components.
- Secret scanning to prevent accidental inclusion of sensitive information like API keys or passwords.
- Container scanning to analyse container images and runtime environments for vulnerabilities and misconfigurations.
- Conduct code security reviews and triage security findings.
- Collaborate with developers to fix identified vulnerabilities and ensure secure coding practices.
- Perform API security testing for standalone APIs not integrated within applications.
- Manage security testing automation processes.
- Integrate security testing tools with organizational systems such as CMDB, ticketing systems, and reporting platforms.
- Maintain tool certifications and stay updated with the latest capabilities and advancements.
- Provide clear and actionable communication of findings to enable informed, prioritised actions.
- Deliver detailed assessment reports with remediation recommendations aligned to risk severity.
- Present findings to both technical and non-technical stakeholders, including executive leadership.
- Maintain comprehensive documentation of security assessme