Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Security Consultant - Penetration Testing & DevSecOps role.

Rezi rewrites your resume against Capgemini's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Security Consultant - Penetration Testing & DevSecOps posting at Capgemini — free, in seconds.

About the Role

We are seeking a Senior Security Consultant - Penetration Testing & DevSecOps with 5-8 years of cybersecurity experience and strong expertise in application penetration testing, offensive security, DevSecOps, SSDLC, and vulnerability management. The role focuses on conducting security assessments across applications, APIs, cloud environments, and CI/CD pipelines, while collaborating with development and engineering teams to embed security throughout the software development lifecycle. The ideal candidate combines strong technical skills, a proactive security mindset, and the ability to communicate risks effectively to both technical and business stakeholders.

Responsibilities

Perform manual and automated penetration testing of web applications, APIs, mobile applications, cloud environments, and supporting infrastructure.
Conduct reconnaissance, vulnerability discovery, exploitation, and post-exploitation activities following industry-standard methodologies such as OWASP, PTES, NIST, and MITRE ATT&CK.
Identify security vulnerabilities, validate exploitability, assess business risk, and provide actionable remediation recommendations.
Execute security assessments against modern architectures including microservices, containers, Kubernetes, and cloud-native applications.
Develop proof-of-concepts to demonstrate security weaknesses and attack paths.
Prepare detailed technical reports and executive summaries for customers and stakeholders.
Integrate security controls and testing into CI/CD pipelines.
Implement and manage SAST, DAST, SCA, IaC, Container Security, Secrets Detection, and API Security testing solutions.
Collaborate with development teams to remediate vulnerabilities and adopt secure coding practices.
Participate in security architecture reviews, threat modeling exercises, and secure design assessments.
Automate security testing and compliance validation within DevOps toolchains.
Develop security guardrails and policy-as-code capabilities to improve software security posture.
Perform vulnerability triage, risk prioritization, and remediation tracking.
Support continuous security monitoring and risk assessment activities.
Analyze emerging threats, attack techniques, and security trends to improve testing methodologies.
Assist in development of security standards, procedures, and best practices.
Work with engineering, cloud, and infrastructure teams to enhance organizational security posture.
Present findings and recommendations to developers, architects, engineering teams, and leadership.
Provide security consulting throughout the software development lifecycle.

Requirements

Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.
5-8 years of hands-on cybersecurity experience.
Minimum 3+ years of experience conducting application and API penetration testing.
Experience implementing or supporting DevSecOps initiatives within CI/CD environments.

Skills

Web Application Security
API Security
Secure SDLC
OWASP Top 10
OWASP API Top 10
MITRE ATT&CK
Threat Modeling
Vulnerability Management
Burp Suite Professional
Nmap
Nessus / Qualys / Tenable
Metasploit
Kali Linux
Checkmarx
Veracode
Snyk
SonarQube
GitHub Actions / Azure DevOps / Jenkins
Container security (Docker, Kubernetes)
Cloud penetration testing
Infrastructure as Code (Terraform, CloudFormation)
Red Team methodologies and adversary simulation
AI/LLM security testing
Zero Trust Architecture
Secure-by-Design principles
Excellent communication, consulting, and stakeholder management skills.

Location

US
Remote

Work Type

Remote

Experience Level

Senior

Education Level

Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.

Salary/Compensations

$82,950 - $135,300

Benefits

Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
Life and disability insurance
Employee assistance programs
Other benefits as provided by local policy and eligibility

About the Company

Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.

Equal Opportunity

All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.