Tata Consultancy Services Security Team

Open security roles at Tata Consultancy Services, and what we know about the team behind them.

information technology & services · 608000 employees · 3 open roles. Updated October 15, 2026.

Open roles (3)

Tata Consultancy Services

“TCS positions application security as embedded into the SDLC ("security-as-a-plugin"), emphasizing shift-left...”

Tata Consultancy Services

“TCS positions application security as embedded into the SDLC ("security-as-a-plugin"), emphasizing shift-left...”

Tata Consultancy Services

“TCS positions application security as embedded into the SDLC ("security-as-a-plugin"), emphasizing shift-left...”

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

TCS positions application security as embedded into the SDLC ("security-as-a-plugin"), emphasizing shift-left integration, security-by-design, proactive risk mitigation, and measurable outcomes.
The operating model combines centralized governance (CoE) and SOC-like Threat Management Centers with program-level security teams that operate independently of application development.
Automation, orchestration, and security-as-a-service are core to reducing manual effort, improving visibility, and accelerating remediation.

The team

Organizational constructs and roles: dedicated AppSec/security teams operating independently of dev teams.
A central CoE to provide governance, expertise, and program support.
Threat Management Centers/TMCs and managed MDR teams (multiple centers, referenced as 13+).
Roles include strategists, analysts, ethical hackers/pen testers, triage/enrichment specialists, playbook authors, incident responders, and MDR/SOAR operators.
Responsibilities include vulnerability discovery and automated scans, manual testing where required, triage and enrichment, playbook-based remediation, continuous maturity assessment and project-specific improvement roadmaps.

What they're working on

Operational priorities and stated goals: shift-left integration of security in SDLC.
Automation and orchestration to centralize and reduce manual triage.
Vulnerability discovery (automated and authenticated scanning) plus manual pen testing for higher assurance.
Risk-based remediation to accelerate remediation velocity.
Cloud, container, and API security.
Program-level visibility (single-pane dashboards) and governance.
Maturity assessments and quantified improvement roadmaps.
Stated outcome targets include improved visibility, faster detection and response, reduced MTTR/MTTD, reduced operational effort (examples cited: up to ~32% effort reduction, ~37% productivity gain), and 30–60% reduction in vulnerabilities in some programs..