* Partner with US teams to provide security guidance as a subject matter expert
around application security and operate YUM application security services
for the brand.
* Aligning with a risk-based approach, collaborate with third-party engineers,
and product owners to identify, prioritize, and remediate vulnerabilities in
mobile and web applications across YUM systems. These include e-commerce
websites, e-commerce mobile apps, and restaurant operations apps.
* Leveraging established YUM security services, review vulnerability scanner
reports/results and work with application and/or engineering teams to
communicate and address/remediate issues. This includes ensuring adherence to
established remediation timelines, including recommending and monitoring
remediation activities.
* Maintain the brand’s application security scan profiles and scan policies as
per baseline standards across scanning tools for containers, SAST, DAST, and
crowd sourced pen testing. This will include reviewing findings of security
scans and onboarding recent applications into scanning tools or services.
* Conduct awareness campaigns with engineering teams to ensure application
development adheres to YUM Global Technology Risk Management development
standards.
* Continuously monitor published vulnerabilities for various applications,
operating systems, and databases. Based on the publicly disclosed
vulnerabilities determine the remediation priority and engage the
stakeholders. Review the solution by re-scanning the disclosed
vulnerabilities. (Familiar with OWASP Top 10, etc.)
* Conduct threat modeling exercises to identify potential risks at the design
and architecture stages and provide guidance to development teams in secure
design and best practices.
* Coordinate with incident response teams to contain, remediate, and perform
root cause analysis on security incidents affecting applications.
Minimum Requirements:
* Bachelor's degree and at least 6-8 years of experience
📌 Security Engineer III (India)
🏢 Yum
📍 India
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.