Noida, Up Engineer java architecture Jobs – 114 Open Jobs Today

Senior SecOps & AppSec Lead - Noida
NeoXam —Noida, Uttar Pradesh
- Hybrid work
- Azure
- Java
- SQL
Sr. z/VM, zLinux, LinuxOne Systems Programmer
Tech Pinacle Innovation Pvt Ltd —Noida, Uttar Pradesh
- ₹8,59,766.08 - ₹17,36,301.87 a year
- Full-time
- Hybrid work
- Java
- Scripting
- Linux
- Work from home
Quick apply
Java Technical Manager
RxLogix —Noida, Uttar Pradesh
- Oracle
- Software troubleshooting
- Java
Senior Software Developer, Frontend
OneSpan —Noida, Uttar Pradesh
- Java
- Databases
- SQL
Quick apply
Performance Testing Engineer
E Hook Systems —West District, Delhi
- Java
- Analysis skills
- JavaScript
PHP Developer June 2026 Sector 6, Noida
DigiVersal Consultants —Noida, Uttar Pradesh
- Software troubleshooting
- English
- Java
Senior Cloud Engineer
NextGenVision Technology —Noida, Uttar Pradesh
- Java
- Software development
- APIs
Senior Software Engineer/ Module Lead (.Net)
BOLD LLC —Noida, Uttar Pradesh
- Java
- SQL
- Analysis skills
- Health insurance
- Paid time off
Senior Lead - AI/ML
Nucleus Software —Noida, Uttar Pradesh
- Java
- Bachelor's degree
- Machine learning
Sr. PHP Developer June 2026 Sector 6, Noida
DigiVersal Consultants —Noida, Uttar Pradesh
- Software troubleshooting
- English
- Java
Sr.Devops Engineer-215033
Knack Consulting Services Pvt Ltd —Noida, Uttar Pradesh
- Azure
- Oracle
- DevOps
Quick apply

Other jobs to consider

Find your next job by exploring related positions.

Junior AI - Engineer
CorroHealth Infotech Private Limited —Noida, Uttar Pradesh
You will work closely with senior engineers and researchers to design, develop, and deploy AI solutions. Across the reimbursement cycle, our scalable solutions…
Quick apply
Java Developer
Acuity IT Solutions —Noida, Uttar Pradesh
We are looking for an experienced Senior Java Developer to design, develop, and maintain enterprise-grade software applications.
8d

I want to receive the latest job alerts for engineer java architecture in noida, up

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

engineer java architecture jobs near noida, up

Senior Software Engineer jobs in Noida, Uttar Pradesh

Technical Manager jobs in Noida, Uttar Pradesh

Senior Ai Ml Engineer jobs in Noida, Uttar Pradesh

Senior Lead Engineer jobs in Noida, Uttar Pradesh

Cloud Engineer jobs in Noida, Uttar Pradesh

System Administrator Schools jobs in Bengaluru, Karnataka

System Programmer jobs in Kolkata, West Bengal

System Programmer jobs in Delhi, Delhi

System Administrator, Hospital jobs in Kerala

Embedded System jobs in Bengaluru, Karnataka

Cam Engineer,cam Programmer,cnc,vmc Programmer jobs in Coimbatore, Tamil Nadu

Senior Software Engineer jobs in Vapi, Gujarat

Senior Software Engineer jobs in Gurgaon Sector 45, Gurugram, Haryana

Senior Software Engineer jobs in Dehradun, Uttarakhand

Civil Engineer jobs in Kochi, Kerala

Diploma Civil Engineer jobs in Kerala

Software Tester,internship jobs in Kochi, Kerala

Senior Software Engineer jobs in Hubli, Karnataka

Technical Assistant jobs in Kerala

Accounts Payable Manager jobs in Mumbai, Maharashtra

Senior SecOps & AppSec Lead - Noida

NeoXam -
Noida, Uttar Pradesh

Apply Now

Job details

Qualifications

CI/CD
Penetration testing
Azure
Go
Kubernetes
Enterprise Software
Encryption
CISSP
Git
Java
SQL
CEH
RBAC
AWS
Docker
Cloud security
JavaScript
Terraform
Continuous integration
Burp Suite
APIs
ISO 27001
Financial services
AWS Certified Security – Specialty
Leadership
Jenkins
TypeScript
GitLab
Communication skills
Python

Full job description

Department Engineering
Reports To Director Engineering
Team Size 1–2 Direct Reports
Scope - AppSec + DevSecOps

Role Overview

We are looking for a Sr. SecOps & AppSec Lead to own and drive security operations across the entire product lifecycle — from code commit through build, deployment, and production. You will manage our security scanning pipeline (Veracode, SonarQube, Trivy), identify and remediate vulnerabilities in application code and open-source dependencies, upgrade libraries to eliminate known CVEs, and work hands-on to fix application security issues alongside development teams.

This role blends application security engineering with DevOps pipeline management. You will not just report vulnerabilities — you will reproduce them, assess their real-world exploitability in our context, and either fix them yourself or guide developers through remediation. You will also own CI/CD pipeline health, ensuring security gates are embedded into every build without becoming a bottleneck. Additionally, you will lead 1–2 junior engineers, building a small but effective security operations practice.

Key Responsibilities

Security Scanning & Pipeline Management

Own and manage the end-to-end security scanning pipeline: SAST (Veracode, SonarQube), SCA (Veracode SCA / Snyk / OWASP Dependency-Check), and container image scanning (Trivy)
Configure, tune, and maintain scanning policies — reduce false positives, set severity thresholds, and define quality gates that block vulnerable builds from promotion
Integrate security scans seamlessly into CI/CD pipelines (Git runner/GitLab CI) so that every pull request and release build is automatically validated without slowing developer velocity
Maintain dashboards and reporting on vulnerability trends, scan coverage, mean-time-to-remediate (MTTR), and open risk posture across the product portfolio
Evaluate and onboard new security tools as the threat landscape and technology stack evolve

Vulnerability Identification, Reproduction & Remediation

Triage vulnerability findings from SAST/SCA/container scans — assess real-world exploitability in the context of the our platform, not just CVSS scores
Reproduce open-source and third-party library vulnerabilities in controlled environments to validate their impact and determine whether the vulnerable code path is actually reachable in our product
Hands-on fix application security issues: SQL injection, XSS, CSRF, insecure deserialization, broken authentication, SSRF, path traversal, and other OWASP Top 10 vulnerabilities in the application codebase
Plan and execute library upgrades to remediate known CVEs in open-source dependencies — assess compatibility impact, coordinate with development teams, and validate that upgrades do not introduce regressions
Manage a vulnerability backlog with clear prioritization (critical/high exploitable vs. low-risk theoretical), SLA tracking, and regular reporting to engineering leadership

Application Security Engineering

Conduct security code reviews for high-risk features: authentication/authorization flows, API security, data encryption, secrets management, and inter-module communication (API/MQ)
Define and enforce secure coding standards and guidelines for the development teams, covering input validation, output encoding, parameterized queries, secure session management, and cryptographic practices
Perform or coordinate DAST (Dynamic Application Security Testing) and periodic penetration testing, managing findings through to closure
Review and harden Kubernetes deployment configurations: pod security policies/standards, network policies, RBAC, secrets management (Vault/Sealed Secrets), and container runtime security
Ensure secure handling of sensitive financial data in transit and at rest, aligned with client security requirements and regulatory expectations

CI/CD Pipeline Ownership & DevOps

Co-own CI/CD pipeline infrastructure (Git runner/GitLab CI): build pipeline optimization, artifact management, deployment automation, and environment provisioning
Implement and maintain infrastructure-as-code for security tooling (Terraform/Helm charts for scanning infrastructure, policy-as-code for compliance checks)
Manage Docker image lifecycle: base image hardening, image scanning in registries, tag governance, and ensuring minimal-footprint production images
Automate security compliance checks: license scanning for open-source dependencies, secrets detection in code repositories (GitLeaks/TruffleHog), and configuration drift detection
Support deployment pipelines for Kubernetes environments: Helm chart security, admission controllers, and runtime protection integration

Compliance, Audit & Governance

Support compliance efforts (SOC 2, ISO 27001, or client-specific security assessments) by providing evidence of security controls, scan reports, and remediation records
Coordinate with external penetration testing firms: scope definition, environment preparation, finding triage, and remediation tracking
Maintain security documentation: threat models, security architecture diagrams, incident response runbooks, and vulnerability management procedures
Produce regular security posture reports for engineering leadership and client-facing teams, translating technical findings into business risk language

Team Leadership & Security Culture

Lead, mentor, and develop 1–2 junior SecOps/AppSec engineers, establishing workflows, review processes, and growth paths
Drive a security-aware culture across engineering: conduct threat modeling workshops, secure coding training sessions, and brown-bag presentations on real-world vulnerabilities
Create and maintain internal security knowledge base: remediation playbooks, common vulnerability patterns in the codebase, and library upgrade guides

Required Qualifications

5–8 years of hands-on experience in application security, SecOps, or DevSecOps for enterprise software products
Strong experience with SAST tools (Veracode and/or SonarQube): policy configuration, scan management, false positive tuning, and developer-facing remediation guidance
Hands-on experience with SCA (Software Composition Analysis): identifying vulnerable open-source libraries, assessing exploitability, planning and executing library upgrades across large codebases
Experience with container security scanning (Trivy, Aqua, or Prisma Cloud) and Docker image hardening best practices
Proven ability to reproduce and fix application-level vulnerabilities (OWASP Top 10) in production codebases — not just scan and report, but actively remediate
Strong CI/CD pipeline experience (Jenkins or GitLab CI): building, maintaining, and optimizing build/deploy pipelines with integrated security gates
Working knowledge of Kubernetes security: pod security standards, RBAC, network policies, secrets management, and admission controllers
Proficiency in at least one application language used in the product stack (Java, Python, JavaScript/TypeScript, or Go) to conduct code reviews and fix vulnerabilities
Experience producing compliance evidence and supporting security audits (SOC 2, ISO 27001, or client security questionnaires)
Strong communication skills: ability to explain vulnerabilities and risk to both developers and non-technical stakeholders

Preferred Qualifications

Experience securing financial services / fintech platforms, particularly systems handling sensitive client data in regulated environments
Familiarity with DAST tools (OWASP ZAP, Burp Suite) and manual penetration testing techniques
Knowledge of infrastructure-as-code security scanning (Checkov, tfsec for Terraform templates)
Experience with cloud security posture management on AWS and/or Azure (GuardDuty, Security Hub, Defender for Cloud)
Certifications: CEH, OSCP, CISSP, AWS Security Specialty, or CKS (Certified Kubernetes Security Specialist)
Experience building security champions programs to embed security awareness within development teams

Apply Now

Refine Your Search

engineer java architecture jobs in noida, up

Senior SecOps & AppSec Lead - Noida

Sr. z/VM, zLinux, LinuxOne Systems Programmer

Java Technical Manager

Senior Software Developer, Frontend

Performance Testing Engineer

PHP Developer June 2026 Sector 6, Noida

Senior Cloud Engineer

Senior Software Engineer/ Module Lead (.Net)

Senior Lead - AI/ML

Sr. PHP Developer June 2026 Sector 6, Noida

Sr.Devops Engineer-215033