Senior Software Engineer, Information Security
Walmart · Bengaluru · 10+ yrs experience · Posted 2026-06-29
Tech stack: AWS, Azure, Docker, GCP, GitHub Actions, Go, Java, Jenkins, Kafka, Kubernetes, Node.js, Python, React, Terraform
Apply on the company site · Get a referral for this role
Walmart salary & ratings · Walmart interview process · More live openings
About the role
Walmart's Information Security Services team is at the forefront of protecting one of the world's largest and most complex retail ecosystems — safeguarding billions of customer transactions, petabytes of data, and a global technology infrastructure spanning stores, e-commerce, and supply chain operations across 19 countries. As part of Walmart's broader Information Security organization, we design, build, and operate enterprise-scale security capabilities — encompassing threat detection and response, vulnerability management, identity and access, application security, and compliance — ensuring that innovation and security go hand in hand. We partner closely with engineering, product, and business teams to embed security at every layer of Walmart's technology stack, enabling teams to move fast without compromising trust. If you're passionate about solving hard security problems at massive scale and making a tangible impact on the safety of millions of customers and associates worldwide, this is where you want to be.
Responsibilities:
- Design and develop full-stack security applications — backend services, APIs, and user-facing dashboards — supporting threat detection, vulnerability management, identity, and compliance workflows.
- Architect and implement microservices and RESTful APIs in Java and Python, integrated with Walmart's cloud-native ecosystem (WCNP/Kubernetes, GCP, Azure).
- Build and maintain data pipelines and analytical models using Python and R to process security telemetry, detect anomalies, and generate actionable insights.
- Develop secure-by-default software, incorporating security patterns such as OWASP guidelines, secrets management, and least-privilege access into every component.
- Actively leverage AI-assisted coding tools (GitHub Copilot, Cursor, Windsurf, internal Walmart AI tools) to accelerate development velocity and code quality.
- Champion Vibe Coding practices — using natural language prompts, AI pair programming, and generative AI to prototype, scaffold, refactor, and review code.
- Integrate LLM-powered capabilities into security tooling — such as AI-driven alert triage, automated runbook generation, and intelligent policy recommendations.
- Contribute to the team's AI adoption maturity by sharing best practices, prompt engineering techniques, and tooling evaluations.
- Own end-to-end CI/CD pipelines using tools such as Concord, Jenkins, Looper, and GitHub Actions — including build, test, security gate enforcement (Snyk, Gatekeeper), and deployment automation.
- Embed security testing (SAST, DAST, SCA, secrets scanning) into pipelines and enforce policy gates in the software delivery lifecycle.
- Partner with DevOps and platform teams to drive Infrastructure as Code (Terraform, Helm) and GitOps practices for security service deployments.
- Ensure production readiness through observability instrumentation — metrics (Prometheus), logging (ELK/Splunk), and distributed tracing.
- Lead the full software development lifecycle — from requirements and design through implementation, testing, deployment, and operations.
- Conduct thorough code reviews, mentor junior and mid-level engineers, and uphold engineering standards across the team.
- Write comprehensive unit, integration, and contract tests, targeting ≥80% code coverage as a baseline.
- Participate in on-call rotations, contributing to incident response, RCA, and blameless postmortem culture.
- Drive technical roadmap discussions, contribute to architecture decision records (ADRs), and represent engineering perspectives in cross-functional planning.
- Work closely with InfoSec product managers, security analysts, and compliance teams to translate security requirements into engineering deliverables.
- Communicate technical decisions clearly to both technical and non-technical audiences through design documents, demos, and presentations.
- Engage with Walmart's broader engineering community — participating in tech talks, hackathons, and open-source initiatives where applicable.
Qualifications:
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field; Master's degree preferred
- 8–10 years of progressive software engineering experience, with demonstrated focus on building and scaling security platforms or services in large enterprise environments
- Proficiency in one or more backend languages: Java, Python, or Go; frontend experience (React, Node.js) is a plus
- Hands-on experience designing security-focused microservices and APIs (REST/gRPC) at scale
- Strong understanding of Identity & Access Management (IAM) — OAuth2, OIDC, SAML, LDAP, Active Directory, or SailPoint
- Experience with vulnerability management platforms and security scanning tools (SAST/DAST/SCA)
- Proficiency with cloud platforms (GCP or Azure) and containerization technologies (Kubernetes, Docker)
- Experience integrating security gates into CI/CD pipelines and DevSecOps workflows
- Familiarity with event-driven architectures (Kafka, Spark) for security telemetry and analytics
- Working knowledge of security frameworks and compliance standards: PCI-DSS, SOX, HIPAA, NIST, or CIS
- Experience with threat modeling, secure design reviews, and translating security requirements into engineering solutions
- Familiarity with common vulnerability classes (OWASP Top 10, CVEs) and remediation strategies
- Strong analytical and problem-solving skills — ability to diagnose complex security issues, evaluate trade-offs, and drive solutions under ambiguity
- Experience leading technical design and architecture decisions for distributed security systems
- Proven track record of mentoring engineers and driving coding best practices across a team
- Strong cross-functional collaboration skills — comfortable working with Security, Product, Infrastructure, and Compliance teams
- Ability to communicate complex security concepts clearly to both technical and non-technical stakeholders
- Experience delivering in an Agile/Scrum environment with a consistent record of shipping quality software
- Cloud: AWS Certified Security Specialty, Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer (AZ-500)
- Java/Dev: Oracle Certified Professional Java Developer (OCP)
- Security: CISSP, CEH, CompTIA Security+, OSCP
- DevSecOps / Platform: Certified Kubernetes Security Specialist (CKS), HashiCorp Vault Associate
Qualifications
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field; Master's degree preferred
- 8–10 years of progressive software engineering experience, with demonstrated focus on building and scaling security platforms or services in large enterprise environments
- Proficiency in one or more backend languages: Java, Python, or Go; frontend experience (React, Node.js) is a plus
- Hands-on experience designing security-focused microservices and APIs (REST/gRPC) at scale
- Strong understanding of Identity & Access Management (IAM)
- OAuth2, OIDC, SAML, LDAP, Active Directory, or SailPoint
- Experience with vulnerability management platforms and security scanning tools (SAST/DAST/SCA)
- Proficiency with cloud platforms (GCP or Azure) and containerization technologies (Kubernetes, Docker)
- Experience integrating security gates into CI/CD pipelines and DevSecOps workflows
- Familiarity with event-driven architectures (Kafka, Spark) for security telemetry and analytics
- Working knowledge of security frameworks and compliance standards: PCI-DSS, SOX, HIPAA, NIST, or CIS
- Experience with threat modeling, secure design reviews, and translating security requirements into engineering solutions
- Familiarity with common vulnerability classes (OWASP Top 10, CVEs) and remediation strategies
- Strong analytical and problem-solving skills — ability to diagnose complex security issues, evaluate trade-offs, and drive solutions under ambiguity
- Experience leading technical design and architecture decisions for distributed security systems
- Proven track record of mentoring engineers and driving coding best practices across a team
- Strong cross-functional collaboration skills — comfortable working with Security, Product, Infrastructure, and Compliance teams
- Ability to communicate complex security concepts clearly to both technical and non-technical stakeholders
- Experience delivering in an Agile/Scrum environment with a consistent record of shipping quality software
- Cloud: AWS Certified Security Specialty, Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer (AZ-500)
- Java/Dev: Oracle Certified Professional Java Developer (OCP)
- Security: CISSP, CEH, CompTIA Security+, OSCP
- DevSecOps / Platform: Certified Kubernetes Security Specialist (CKS), HashiCorp Vault Associate
Responsibilities
- Design and develop full-stack security applications — backend services, APIs, and user-facing dashboards — supporting threat detection, vulnerability management, identity, and compliance workflows.
- Architect and implement microservices and RESTful APIs in Java and Python, integrated with Walmart's cloud-native ecosystem (WCNP/Kubernetes, GCP, Azure).
- Build and maintain data pipelines and analytical models using Python and R to process security telemetry, detect anomalies, and generate actionable insights.
- Develop secure-by-default software, incorporating security patterns such as OWASP guidelines, secrets management, and least-privilege access into every component.
- Actively leverage AI-assisted coding tools (GitHub Copilot, Cursor, Windsurf, internal Walmart AI tools) to accelerate development velocity and code quality.
- Champion Vibe Coding practices — using natural language prompts, AI pair programming, and generative AI to prototype, scaffold, refactor, and review code.
- Integrate LLM-powered capabilities into security tooling — such as AI-driven alert triage, automated runbook generation, and intelligent policy recommendations.
- Contribute to the team's AI adoption maturity by sharing best practices, prompt engineering techniques, and tooling evaluations.
- Own end-to-end CI/CD pipelines using tools such as Concord, Jenkins, Looper, and GitHub Actions — including build, test, security gate enforcement (Snyk, Gatekeeper), and deployment automation.
- Embed security testing (SAST, DAST, SCA, secrets scanning) into pipelines and enforce policy gates in the software delivery lifecycle.
- Partner with DevOps and platform teams to drive Infrastructure as Code (Terraform, Helm) and GitOps practices for security service deployments.
- Ensure production readiness through observability instrumentation — metrics (Prometheus), logging (ELK/Splunk), and distributed tracing.
- Lead the full software development lifecycle — from requirements and design through implementation, testing, deployment, and operations.
- Conduct thorough code reviews, mentor junior and mid-level engineers, and uphold engineering standards across the team.
- Write comprehensive unit, integration, and contract tests, targeting ≥80% code coverage as a baseline.
- Participate in on-call rotations, contributing to incident response, RCA, and blameless postmortem culture.
- Drive technical roadmap discussions, contribute to architecture decision records (ADRs), and represent engineering perspectives in cross-functional planning.
- Work closely with InfoSec product managers, security analysts, and compliance teams to translate security requirements into engineering deliverables.
- Communicate technical decisions clearly to both technical and non-technical audiences through design documents, demos, and presentations.
- Engage with Walmart's broader engineering community —
- participating in tech talks, hackathons, and open-source initiatives where applicable.