HCLSoftware Security Team
What we know about the HCLSoftware security team.
information technology & services · 5900 employees
Open roles (0)
HCLSoftware has no open security roles on the board right now.
Security at HCLSoftware
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
How they approach application security
- HCLSoftware's AppSec mission centers on enabling risk management, compliance, and robust security across the software lifecycle.
- The company emphasizes developer enablement through AppScan integration into developer workflows with real-time feedback and IDE plugins for shift-left integration.
- Security is positioned as embedded into every stage of the SDLC, with a focus on automated testing and security scanning through HCL Secure DevOps.
- The philosophy prioritizes making security accessible and enabling developers with practical feedback rather than acting purely as a gatekeeping function.
The team
- HCLSoftware has a dedicated AppSec leadership structure with a Senior Vice President & Chief Information Security Officer overseeing global Infrastructure, information security, product security, risk, and compliance programs. The company has 10,001+ employees with 14 active AppSec job postings as of March 19, 2026.
- Common skill patterns across AppSec roles include DAST, SAST, IAST, and SCA expertise.
- Specific AppSec team size and detailed reporting lines below the CISO are.
What they're working on
HCLSoftware promotes shift-left practices through IDE plugin integration in AppScan. The company maintains a formal vulnerability reporting process via PSIRT@hcl-software.com. Recent initiatives include launching AppScan on Cloud and conducting focused sessions on cloud application security. The company implements HCL Secure DevOps for automated testing and security scanning. While no public evidence exists for a formal security champions program or disclosed remediation SLAs, the company actively markets its security initiatives and maintains an active job posting pipeline for AppSec roles.