Do you support candidates who need a visa?

This depends on the role. Refer to the job posting for details and make sure you have the necessary permissions or visa to work in the country you’re applying for. We’ll check your documents during the recruitment process and let you know if you’re missing anything.

Do you offer relocation services?

Depending on the role and location, we may be able to offer support with relocation. Your recruiter will discuss this with you during the recruitment process.

What’s your approach to hybrid working? Where will I be based?

We’ve adapted to the changing world of work, so depending on your role and location, you'll be able to find a balance between home, on-site and office work that works for you and the business.

Will I need to travel for work?

Travel requirements vary by role but if you have a field-based role then yes, you will need to travel for work. You’ll find details in the job posting itself and you can ask your recruiter for clarification.

What benefits do you offer?

We offer a comprehensive benefits package that varies by role and location. We focus on work/life balance and offer you flexible working hours, vacation allowance, competitive pension, insurance and a profit share scheme. You’ll find more details on job postings, and your recruiter can answer any specific questions you have.

How much holiday do you offer?

Your holiday entitlement depends on your location and length of service. Please take a look at the job posting for more details and speak with your recruiter if you have questions about a specific role’s entitlement.

What’s your pension policy?

We care about your long-term financial security and prioritize pension and retirement benefits to reflect that. You can ask your recruiter for more information if you have specific questions about our pension policy.

What’s your sick leave policy?

Your health and wellbeing are our priority, and our policies reflect this. You can find out more about our sick leave policy by talking to your recruiter.

What’s your parental leave policy?

We understand how important family life is and support parents with leave policies tailored to their needs. If you have specific questions, please ask your recruiter for more details.

Do you offer bonuses?

You’ll be part of our global profit share scheme that means we all share in our success as a business. If we profit, so do you. You’ll be rewarded as part of our Total Compensation approach each year, which depends on our year-end results.

What’s your approach to wellbeing and health insurance?

Alongside a healthcare package where you can sign up your spouse and any dependants too, you’ll have access to the many wellbeing initiatives we run, including workshops, webinars, consultations with specialists.

What career development opportunities do you offer?

We believe in the 70/20/10 approach to learning – on-the-job training, technical development, and formal learning opportunities. You can check out our knowledge booster program video to find out more about how we nurture your growth and development.

Do employees return to DNV after leaving?

Yes, we regularly welcome back colleagues who have worked elsewhere and then return to us. You can hear one of their stories here .

How can I manage my application/data?

If you log in to your account on our careers site, you can manage your application and data preferences.

Can I sign up for job alerts?

Yes, you can register for job alerts by joining our Talent Community here . By signing up, you’ll be first to learn about new job opportunities that could be the perfect fit for you.

Senior Cybersecurity Lead – DevSecOps and Governance

Location:: Chennai, India

Business:: Energy Systems

Position type:: Full Time

Contract type:: Permanent Employee

Job ID:: 7771

Apply

Overview

About us

We are the independent expert in assurance and risk management. Driven by our purpose, to safeguard life, property, and the environment, we empower our customers and their stakeholders with facts and reliable insights so that critical decisions can be made with confidence.

As a trusted voice for many of the world’s most successful organizations, we use our knowledge to advance safety and performance, set industry benchmarks, and inspire and invent solutions to tackle global transformations.

About Energy Systems

We help customers navigate the complex transition to a decarbonized and more sustainable energy future. We do this by assuring that energy systems work safely and effectively, using solutions that are increasingly digital. We also help industries and governments to navigate the many complex, interrelated transitions taking place globally and regionally, in the energy industry.

About the role

Senior Cybersecurity Lead to own security process and governance across the SDLC for engineering teams in Chennai and the US. Working with the Principal Security Engineer, you will define and maintain the security processes and controls our engineering teams follow across our cloud platforms. You will embed Secure SDLC/DevSecOps, run penetration testing and vulnerability management, partner with the AI team to secure and govern AI-enabled capabilities, and lead security culture, audit readiness, and incident management. You will also report security risk to engineering and business leaders.

What You'll Do

You'll own the process and governance for cybersecurity within the SDLC, focused on three core priorities:

Embedding security into the SDLC. Partner with the Engineering team on design reviews, CI/CD testing, penetration testing, and vulnerability management.
Securing and governing AI. Partner with the AI team to set the security and governance guardrails for AI/LLM-enabled features and AI-assisted development in Platform Services.
Driving security culture and governance. Make security part of the definition of done for engineering and AI teams in Chennai and the US; lead ISO 27001 / SOC 2 audit readiness; work with the Principal Security Engineer on incident management.

Embed security into the SDLC

Define and maintain Secure SDLC / DevSecOps processes, security controls, and review gates with engineering across internal and cloud-based apps.
Integrate security testing and automation into CI/CD with Engineering and DevOps; define testing requirements and roll out secure-coding practices and tooling.
Ensure architecture/design reviews and threat modelling happen early in delivery; work with the Principal Security Engineer to address identified risks.
Institute cloud security review processes for AWS and/or Azure: ensure IAM, network, logging, encryption, and CI/CD security are reviewed with the relevant technical teams.
Own the penetration testing process for web, API, cloud, and infrastructure: coordinate scoping, testing, reporting, remediation tracking, and retesting.
Run the vulnerability management process with risk-based prioritization (exploitability, exposure, impact, asset criticality); coordinate remediation with engineering and track findings to closure.

Secure and govern AI

In partnership with the AI team:

Set AI security policy and minimum controls for AI-enabled products and AI-assisted development (least privilege, tool allowlists, data-loss controls, input/output validation).
Identify and track AI risks: data and code leakage, prompt injection, unsafe output, over-permissioned agents, model/supply-chain, and IP/licensing.
Define oversight standards for AI agents: autonomy limits, when human approval is required, auditability, and AI incident escalation.
Align with ISO/IEC 42001 and NIST AI RMF; provide evidence for audits and customer assurance.

Drive security culture and governance

Run security awareness and secure-coding training for engineering teams in Chennai and the US.
Mentor engineers on secure practices; coordinate with Engineering, AI, DevOps, Architecture, and Product on adoption.
Support ISO 27001 / SOC 2 controls and audits; use security metrics and reporting to track adoption and improve processes.
Partner with the Principal Security Engineer on security incident management: defining escalation paths, coordinating response, and leading post-incident reviews.

What we offer

Flexible work arrangements for better work-life balance
Generous Paid Leaves (Annual, Sick, Compassionate, Local Public, Marriage, Maternity, Paternity, Medical leave)
Medical benefits ( Insurance and Annual Health Check-up)
Pension and Insurance Policies (Group Term Life Insurance, Group Personal Accident Insurance, Travel Insurance)
Training and Development Assistance (Training Sponsorship, On-The-Job Training, Training Programme)
Additional Benefits (Long Service Awards, Mobile Phone Reimbursement)
Company bonus/Profit share.

*Benefits may vary based on position, tenure/contract/grade level*

DNV is an Equal Opportunity Employer and gives consideration for employment to qualified applicants without regard to gender, religion, race, national or ethnic origin, cultural background, social group, disability, sexual orientation, gender identity, marital status, age or political opinion. Diversity is fundamental to our culture and we invite you to be part of this diversity.

About you

Must Have Experience

8–10+ years in cybersecurity, with a strong application security background.
Solid understanding of web and API security (OWASP Top 10, OWASP API Security Top 10).
Led penetration testing and vulnerability management programs end-to-end: scoping, risk-based prioritization, remediation tracking, and retesting.
Built or matured Secure SDLC / DevSecOps processes, including SAST, SCA, DAST, secrets scanning, and review/merge gates in CI/CD.
Experience running or participating in threat modelling as part of delivery.
Familiarity with software supply-chain security (SBOM, build integrity).
AWS and/or Azure security, including IAM, network, logging, encryption, and cloud security controls and review processes.
Strong understanding of incident response and incident management.
Experience with managed security services and security operations.
Working knowledge of security governance and compliance frameworks (ISO 27001, SOC 2), including control design, audit evidence, and security metrics.
Working knowledge of AI/LLM security risks (e.g., prompt injection, data leakage, over-permissioned agents) and the OWASP LLM Top 10.
Strong communication, stakeholder management, and leadership; proven ability to get security practices adopted across teams without direct authority.

Preferred

SaaS, product, or cloud-based environment experience; security automation.
Experience securing AI/LLM-enabled applications or establishing AI governance (e.g., ISO/IEC 42001, NIST AI RMF).
Established a threat modelling practice across teams: standard methodology (e.g., STRIDE), templates, and review cadence.
Implemented software supply-chain controls: SBOM management, artifact signing, and provenance (e.g., SLSA).
Managed MSSP/MDR relationships: SLAs, escalation, and integration with internal incident processes.
Certifications: CISSP, CISM, or CRISC; ISO 27001 Lead Implementer/Auditor a plus.

Education

Bachelor's or Master's in Computer Science, Cybersecurity, IT, Engineering, or related – or equivalent experience plus recognized certifications.

Security and compliance with statutory requirements in the countries in which we operate is essential for DNV. Background checks will be conducted on all final candidates as part of the offer process, in accordance with applicable country-specific laws and practices.

Benefits

Please note that some benefits may vary depending on location, business area, and employment terms. Please confirm with your recruiter.

Profit Share

You’ll be part of our global profit share scheme that means we all share in our success as a business. If we profit, so do you. This will be part of our Total Compensation approach each year and depends on our year-end results.

Professional Development

We believe in the 70/20/10 learning model, where 70% of your learning comes from performing your everyday tasks and working on different projects, new areas and initiatives to gain new skills. 20% from working with others and mentoring and the rest from formal education.

Hybrid Work Model

We work in a hybrid model (three days from the office) and have flexible starting hours. This means you can fit your work and life together in a way that works for you.

Global Opportunities

We support you in exploring different career opportunities or shifting between teams, business areas, or geographies, so that you can shape your career according to what you find motivating.

Modern Office in Pune

Our office in Pune has a modern look and feel and you’ll find zones for both focused work and team integration. Sit/stand desks, high-quality adjustable chairs and balance balls are just a few examples of what ergonomic office means at DNV.

Integration Events

Depending on where you are located, you’ll have the opportunity to participate in offsite meetings as well as different initiatives and fun events at the office. We believe that a well-integrated team is a well-functioning team.

Diversity, Equity and Inclusion

At DNV, our commitment to Diversity, Equity, and Inclusion is not only an ethical choice, but also a business decision.

Diversity, fairness, and a sense of belonging are a source of strength for our people, our business, and our customers, and help us to deliver on our purpose, vision, and values.

Learn more

Working here

Since 1864 we’ve been dedicated to safeguarding life, property and the environment. Today we remain at the forefront of new technologies and techniques to help our customers transform for a more sustainable future.

At DNV you can expect to deliver career and industry defining work. You’ll be given the time to build your network, the resources to support your development, and the freedom to satisfy your curiosity and desire to learn.

Learn more

Application Process

FAQs

Welcome to our Frequently Asked Questions page. We’ve put together answers to the questions we’re asked most often to help you find the information you need quickly and easily. Whether you're curious about our recruitment process, benefits or career growth and development, you should find the information below.

How can I find job openings that fit my skills and interests?

Explore our official job search page where you can use filters such as job type, location, and department to find roles that best match your qualifications and career aspirations.

What’s your application process like?

You can apply directly through our careers page by submitting your CV and any other documents we require (i.e. university diplomas/transcripts; visas; previous employment reference letters). Make sure your application is fully completed, and you tailor it to the specific job listing.

Is your recruitment process designed to be inclusive and accessible?

Yes, it is. We're an equal opportunities employer and welcome applications from all candidates. We’re happy to support your need for any adjustments during the application and hiring process. Share the details of what you need within your application.

What types of interviews might I undergo?

Depending on your role, our interview process may include initial phone screenings, video conferences, and in-person interviews, focusing on both your technical abilities and our shared values. You can ask your recruiter specifically about the interview process for your role.

How long does the hiring process typically take from application to decision?

The timeline can vary but we make every effort to reply to each candidate as soon as possible and keep everyone up-to-date with where they are in the recruitment process.

How do I know if a recruitment contact is legitimately from your company?

Official communication will come from our verified company email addresses. Carefully check any suspicious looking emails and if you have any doubts, don’t engage.

Are there any fees involved in your recruitment process?

No, we do not charge any fees at any stage of our recruitment process. All applications and interviews are free of charge, we will never ask you to pay any fees or make any payments – please be wary of any requests for payment as these are likely scams.

What should I do if I suspect a job scam?

If you encounter suspicious job postings or recruitment practices, do not provide personal information and contact your recruiter as soon as possible. We take these matters seriously. We will never ask you to pay any fees or make any payments part of our recruitment process.

Does DNV complete background checks?

Please ask your recruiter for further details.

Join Our Talent Community

Can't find the right fit?

Be the first one to learn about new job opportunities that might be a perfect fit for you.

Join

Disclaimer

Please beware of recruitment scams that pretend to be from DNV or its employees. We will never ask you to pay any fees or make any payments as part of our recruitment process.