At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Job description - Senior – Risk Consulting
Job Title: Application Security Reviewer

Overview: We are seeking an experienced Application Security Reviewer to join our team. The candidate is responsible for conducting application security assessments to identify and mitigate potential security risks in our applications and systems. This role requires a deep understanding of security principles, threat modelling methodologies, and the ability to communicate findings effectively to technical and non-technical stakeholders.

Key Responsibilities:

Threat Modelling: Must Have

Analyse software systems to identify potential threats and vulnerabilities.




Create and maintain threat models that outline potential attack vectors and prioritize security efforts (leveraging established Threat Model frameworks like STRIDE)
Collaborate with development teams to remediate identified vulnerabilities through code reviews and energetic testing.
Validate threat models against industry standards and best practices, ensuring alignment with organizational security policies.
Document findings from threat modelling assessments, including identified risks, recommended mitigations, and action plans.
Prepare and present reports to stakeholders, summarizing assessments and providing actionable insights.

Secure Code Review:

Review code written by developers to identify security flaws and ensure adherence to coding standards and best practices.
Integrate security into the software development lifecycle.

Security Testing:

Perform various security tests, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DA

📌 Risk Consulting (Noida)
🏢 EY
📍 Noida