The Area: The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality, integrity and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security, policies and procedures, disaster recovery and compliance/regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure.

The Role: The Lead Security Analyst will assist in supporting Morningstar’s application security automation program. This individual will help integrate static and agile security analysis tools into Morningstar’s continuous integration processes, assist with security remediation activities, ensure that vulnerabilities are being remediated in a timely manner and support development and technical personnel as required. This position is based in our Mumbai location.

Responsibilities
Create,



manage and maintain Jenkins continuous integration jobs to support application security automation
Administer common static and energetic security assessment tools
Verify automated application security findings that result from automated static and energetic assessments
Work directly with internal business units to communicate risks and to help ensure open vulnerabilities are resolved in a timely manner
Collect and analyze application security metrics
Provide security remediation advice and training to technical personnel
Assist with documenting secure coding guidelines and running training programs to assist internal development personnel
Provide software security support and remediation guidance to development personnel

Requirements
A bachelor’s degree and 7+ years’ experience in a development or software security / penetration testing role
We’re looking for someone who enjoys breaking code, solving puzzles, and diagnosing problems
Excellent communicat

📌 Lead Security Analyst Mumbai
🏢 Morningstar
📍 Mumbai