Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Engaged Employer

Asian Paints

Compare

4.0

based on 7.4k Reviews

Video summary

3 Asian Paints Domain Expert Jobs

Domain Expert - Systems

Asian Paints Limited

4.0

based on 7.4k Reviews

8-13 years

Mumbai

Domain Expert - Systems

Asian Paints

posted 1mon ago

Job Role Insights

Flexible timing

Key skills for the job

Digital Marketing DevOps Chat Process Java Robotic Process Automation Jenkins

+ 12 more

Job Description

DescriptionJob Purpose: DevSecOps Domain Expert needs to well versed with DevOps processes, Application Security and automation processes and ensuring the security, efficiency, and reliability of DevSecOps processes You will play crucial role in embedding security with CI/CD pipeline and ensuring the best practices are followed across the development life cycle / change management processes Additionally, expertise in Process Automation is a plus, to enhance productivity, consistency, and speed Business Responsibility Areas:

DevSecOps:

Needs to well be versed with DevOps processes, Implement, and manage security automation practices with DevOps pipelines to ensure secure software development and deployment
Application Security:
- Identify, assess, and mitigate vulnerabilities in application and to ensure adherence to security policies, standards, and guidelines
- Needs to conduct threat modeling, vulnerability assessments and risk analysis for DevSecOps processes to identify security gaps and recommend solutions
- Collaborate with Development & Security Teams:
  
  Provide security guidance to developers and ensuring secure coding practices are followed and review security standards with team
  
  Embed Security best practices in SDLC life cycle Training and mentorship to developers for on secure coding principles
  
  Automation & Tooling:
  
  Design, build and maintain automated pipeline with integrated security tools like SAST, DAST, vulnerability management
  
  Monitoring and Governance
  
  Establish monitoring systems for DevSecOps onboarding, deployment, and runtime application security
  
  Collaborate on incidents, response and investigations related to application security
  
  Document and maintain policies and procedures for secure development and deployment
  
  Continuous Improvement:
  
  Stay updated on industry trends and emerging technologies in DevSecOps, Application security Identify opportunities to enhance security, efficiency and scalability of current process and systems
  
  Qualifications:
  BE Comp Sc / IT, Masters DegreeComp Science/IT, MCA
  
  Previous Experience:
  
  8+ years of overall experience with 3+ years of experience in DevSecOps, Application security Proficiency in CI/CD tools like Jenkins, GitLab, etc and security tool likeF5, Fortify, SonarQube etc In-depth understanding of secure coding practices, application security testing methodologies