Security Consultant Penetration Testing & DevSecOps
Chicago, IL - USA
Job Summary
Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way youd like where youll be supported and inspired bya collaborative community of colleagues around the world and where youll be able to reimagine whats possible. Join us and help the worlds leading organizationsunlock the value of technology and build a more sustainable more inclusive world.
This is a remote role based in the US.
We are seeking a Senior Security Consultant - Penetration Testing & DevSecOps with 5-8 years of cybersecurity experience and strong expertise in application penetration testing offensive security DevSecOps SSDLC and vulnerability management. The role focuses on conducting security assessments across applications APIs cloud environments and CI/CD pipelines while collaborating with development and engineering teams to embed security throughout the software development lifecycle. The ideal candidate combines strong technical skills a proactive security mindset and the ability to communicate risks effectively to both technical and business stakeholders.
Penetration Testing & Offensive Security
- Perform manual and automated penetration testing of web applications APIs mobile applications cloud environments and supporting infrastructure.
- Conduct reconnaissance vulnerability discovery exploitation and post-exploitation activities following industry-standard methodologies such as OWASP PTES NIST and MITRE ATT&CK.
- Identify security vulnerabilities validate exploitability assess business risk and provide actionable remediation recommendations.
- Execute security assessments against modern architectures including microservices containers Kubernetes and cloud-native applications.
- Develop proof-of-concepts to demonstrate security weaknesses and attack paths.
- Prepare detailed technical reports and executive summaries for customers and stakeholders.
DevSecOps & Secure SDLC
- Integrate security controls and testing into CI/CD pipelines.
- Implement and manage SAST DAST SCA IaC Container Security Secrets Detection and API Security testing solutions.
- Collaborate with development teams to remediate vulnerabilities and adopt secure coding practices.
- Participate in security architecture reviews threat modeling exercises and secure design assessments.
- Automate security testing and compliance validation within DevOps toolchains.
- Develop security guardrails and policy-as-code capabilities to improve software security posture.
Vulnerability Management & Security Engineering
- Perform vulnerability triage risk prioritization and remediation tracking.
- Support continuous security monitoring and risk assessment activities.
- Analyze emerging threats attack techniques and security trends to improve testing methodologies.
- Assist in development of security standards procedures and best practices.
- Work with engineering cloud and infrastructure teams to enhance organizational security posture.
Stakeholder Engagement
- Present findings and recommendations to developers architects engineering teams and leadership.
- Provide security consulting throughout the software development lifecycle.
Education
- Bachelors degree in Computer Science Information Security Engineering or a related field.
Experience
- 5-8 years of hands-on cybersecurity experience.
- Minimum 3 years of experience conducting application and API penetration testing.
- Experience implementing or supporting DevSecOps initiatives within CI/CD environments.
Technical Skills
- Strong understanding of:
- Web Application Security
- API Security
- Secure SDLC
- OWASP Top 10
- OWASP API Top 10
- MITRE ATT&CK
- Threat Modeling
- Vulnerability Management
- Hands-on experience with:
- Burp Suite Professional
- Nmap
- Nessus / Qualys / Tenable
- Metasploit
- Kali Linux
- Checkmarx
- Veracode
- Snyk
- SonarQube
- GitHub Actions / Azure DevOps / Jenkins
Desired Qualifications
Certifications :
One or more of the following certifications:
- OSCP (Preferred)
- CRTO
- PNPT
- CEH
- GWAPT
- GPEN
- CISSP
- CCSP
- Azure Security Engineer Associate
- AWS Security Specialty
Additional Skills :
- Experience with container security (Docker Kubernetes).
- Experience conducting cloud penetration testing.
- Understanding of Infrastructure as Code (Terraform CloudFormation).
- Familiarity with Red Team methodologies and adversary simulation.
- Experience with AI/LLM security testing is a plus.
- Exposure to Zero Trust Architecture and Secure-by-Design principles.
- Excellent communication consulting and stakeholder management skills.
The base compensation range for this role in the posted location is: $70176- $170040.
Capgemini provides compensation range information in accordance with applicable national state provincial and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini in good faith believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.
The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.
These may include but are not limited to: Geographic location Education and qualifications Certifications and licenses Relevant experience and skills Seniority and performance Market and business consideration Internal pay equity.
It is not typical for candidates to be hired at or near the top of the posted compensation range.
In addition to base salary this role may be eligible for additional compensation such as variable incentives bonuses or commissions depending on the position and applicable laws.
Capgemini offers a comprehensive non-negotiable benefits package to all regular full-time employees. In the U.S. and Canada available benefits are determined by local policy and eligibility and may include:
- Paid time off based on employee grade (A-F) defined by policy: Vacation: 12-25 days depending on grade Company paid holidays Personal Days Sick Leave
- Medical dental and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g. 401(k) in the U.S. RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
- Other benefits as provided by local policy and eligibility
Important Notice: Compensation (including bonuses commissions or other forms of incentive pay) is not considered earned vested or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgeminis discretion consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time within the limits of applicable legislation.
Disclaimers
Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness accessibility inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race national origin gender identity/expression age religion disability sexual orientation genetics veteran status marital status or any other characteristic protected by law.
This is a general description of the Duties Responsibilities and Qualifications required for this position. Physical mental sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation please reach out to your recruiting contact.
Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification including during the hiring and onboarding process.
Click the following link for more information on your rights as an Applicant in the United States. is a global business and technology transformation partner helping organizations to accelerate their dual transition to a digital and sustainable world while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340000 team members in more than 50 countries. With its strong over 55-year heritage Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering all fueled by its market leading capabilities in AI generative AI cloud and data combined with its deep industry expertise and partner ecosystem.
Required Experience:
Contract
About Company
A global leader in consulting, technology services and digital transformation, we offer an array of integrated services combining technology with deep sector expertise.