Senior DevSecOps Engineer

Job Description

TriNet is a leading provider of comprehensive human resources solutions for small to midsize businesses (SMBs). We enhance business productivity by enabling our clients to outsource their HR function to one strategic partner and allowing them to focus on operating and growing their core businesses. Our full-service HR solutions include features such as payroll processing, human capital consulting, employment law compliance and employee benefits, including health insurance, retirement plans and workers' compensation insurance.

TriNet has a nationwide presence and an experienced executive team. Our stock is publicly traded on the NYSE under the ticker symbol TNET. If you're passionate about innovation and making an impact on the large SMB market, come join us as we power our clients' business success with extraordinary HR.

Don't meet every single requirement Studies have shown that many potential applicants discourage themselves from applying to jobs unless they meet every single requirement. TriNet always strives to hire the most qualified candidate for a particular role, ensuring we deliver outstanding results for our small and medium-size customers. So if you're excited about this role but your past experience doesn't align perfectly with every single qualification in the job description, nobody's perfect – and we encourage you to apply. You may just be the right candidate for this or other roles.

A Brief Overview

The Senior DevSecOps Engineer is a highly technical individual with a strong understanding of web application security and software development lifecycle (SDLC). Working closely with other members of the team and reporting directly to the Security Engineering Manager, you will assist in the day-to-day operation of the TriNet's global app sec program. This will include (but is not limited to) developing new ways to detect and mitigate application security vulnerabilities through tooling and hands on testing. This position will also monitor, detect, response and lead any incident response related to application security. As a long-term goal, this position will analyze to discover anti-patterns within Trinet application ecosystem for making long lasting impact to how Trinet builds its software.

Locations

India (On-site)

What You Will Do

• Assist in the day-to day operation of the organization's global app sec program.
• Develop secure software testing and validation procedures by fine tuning custom rules in SAST / DAST tooling
• Conduct security QA testing on high-risk product features (i.e. pen testing)
• Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) in conjunction with an application or system major change.
• Analysis to discover anti-patterns within the application ecosystem in support of strategic software goals.
• Provide support to dev teams in developing unit test cases that assures against business logic flaws and missing authorization checks.
• Performs other duties as assigned
• Complies with all policies and standards

Education Qualifications

Experience Qualifications

Skills And Abilities

Licenses and Certifications

Travel Requirements

minimal

Work Environment

Please Note : TriNet reserves the right to change or modify job duties and assignments at any time. The above job description is not all encompassing. Position functions and qualifications may vary depending on business necessity.

TriNet is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. Any applicant with a mental or physical disability who requires an accommodation during the application process should contact [HIDDEN TEXT] to request such an accommodation.

Skills Required

DAST, SAST, Agile Software Development, Penetration Testing