DevSecOps Specialist, NTT DATA
ISM Specialist
Digital transformation consulting and services
Be an early applicant
Digital transformation consulting and services
1001+ employees
Be an early applicant
1001+ employees
Company mission
To leverage information technology to create new paradigms and values, which help contribute to a more affluent and harmonious society.
Role
Who you are
- Please note, to be considered for this position you must be eligible for SC clearance
- Proficiency in multiple programming languages (e.g., Java, Python, JavaScript, Go, .NET)
- Extensive experience deploying application security tools like SonarQube, Checkmarx, Veracode, OWASP ZAP
- Expertise in CI/CD tools and platforms (e.g., Jenkins, GitHub Actions, Azure DevOps)
- Solid understanding of container orchestration technologies (e.g., Kubernetes, Docker)
- Familiarity with cloud platforms (AWS, Azure, GCP) and IaC assessment tools (Terraform, CloudFormation)
- Security Expertise
- Advanced knowledge of the OWASP Top 10 vulnerabilities, secure coding techniques, and cryptographic best practices
- Proficiency in API security testing and securing microservices
- Hands-on involvement in framework-based security compliance efforts (ISO 27001, GDPR, SOC 2)
- Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, or equivalent experience
- 2 to 4 years of direct experience in application security engineering
- Familiarity with implementing container security policies and securing high-performance CI/CD development ecosystems
What the job involves
- As an Application Security DevSecOps Specialist at NTT DATA, you will integrate security best practices throughout the software development lifecycle (SDLC), implement secure coding standards, and design automation frameworks to ensure robust application security
- Collaborate with development teams to establish secure, modernized workflows, embed security tooling in CI/CD pipelines, and secure cloud-native environments. This role offers opportunities to work in cutting-edge agile settings, delivering high-impact security initiatives across diverse industries
- Security in SDLC
- Incorporate security controls and standards into all phases of the software development lifecycle (SDLC)
- Collaborate with developers to adopt secure coding practices, including OWASP compliance
- Conduct threat modeling and evaluate design documents to identify security vulnerabilities
- Establish security requirements and acceptance criteria for application development projects
- DevSecOps Automation
- Design and implement security automation within CI/CD workflows using tools for SAST, DAST, IAST, SCA and compliance monitoring
- Develop custom security testing frameworks compatible with agile and DevSecOps models
- Conduct infrastructure-as-code (IaC) configuration checks and enforce compliance policies
- Automate secrets scanning, credential hygiene practices, and dependency vulnerability reviews
- Application Security Testing
- Execute static (SAST) and dynamic (DAST) application security assessments
- Perform manual penetration testing and secure code reviews to detect risks
- Analyze application dependencies and third-party components, ensuring vulnerability remediation
- Validate security fixes via rigorous regression testing and secure deployment methods
- Security Training and Awareness
- Prepare training initiatives for developers on secure coding practices, application security principles, and DevSecOps workflows
- Create and disseminate security documentation, guidelines, and playbooks for developers and architects
- Mentor engineers to adopt security-first product development and incident prevention strategies
- Establish and support developer security champion programmes within agile teams
- Cloud and Container Security
- Implement robust security controls for containerized workloads in Docker, Kubernetes, and similar platforms
- Design and secure API endpoints and microservices architectures
- Leverage cloud security services on AWS, Azure, or GCP to deliver secure, scalable solutions
- Advocate for best practices in secret management, repository vaulting, and cloud-native application monitoring
- Success Metrics (6–12 Months):
- Secure at least 10 client applications through DevSecOps implementation
- Achieve 30–40% reduction in vulnerabilities in production environments
- Ensure full automation coverage of 90%+ security testing workflows within CI/CD pipelines
- Deliver bi-monthly security training, resulting in measurable adoption increases of secure coding practices
Salary benchmarks
Our take
The changes brought on by digitisation have only accelerated in the past few decades, and large organisations have been struggling to keep up. Attracting future investment and ensuring growth is more than a matter of purchasing new tools, it involves a fundamental change in ways of working and company culture that few organisations have the expertise to achieve on their own. The UK and Ireland arm of NTT Data, a global digital transformation consultancy and services firm, exists to support businesses and government organisations through this seismic change.
With digital transformation at the top of most enterprises' agendas, NTT Data faces major competition in this sector from the likes of Deloitte, Accenture and IBM's consulting arm. However NTT Data UK & Ireland brings significant local expertise particularly in UK telecommunications, financial services and the British public sector which gives them an edge in this market.
NTT Data UK&I has ambitious plans to capture 2% of the total digital transformation market in the UK, a sector which was worth £20 billion in 2022 and is projected to increase rapidly year on year. To achieve this it has formed strategic partnerships with infrastructure providers such as Google Cloud, allowing it to offer multi-cloud solutions as part of its suite of services to its clients. If it can leverage the size and expertise of its parent organisation successfully while still retaining its local advantages, it is well placed to achieve this goal.
Steph
Company Specialist at Welcome to the Jungle
Insights
6% employee growth in 12 months
Company
Company benefits
- A people focused business
- Excellent opportunities to grow your career, including an online training platform with 3000+ courses, accessible from everywhere, to sharpen your skills
- A varied client base
Company HQ
London, UK
Leadership
Fernando Apezteguia
(Business Development and Value Creation NTT DATA UK)Was Market Unit Lead UK with NTT DATA before stepping up to the role of CEO of NTT DATA UK. Previously CEO of everis in Brazil and SAP specialist with El Corte Inglés.
Share this job
View 34 more jobs at NTT DATA