15 Aug
|
GSPANN Technologies
|
Hyderabad
15 Aug
GSPANN Technologies
Hyderabad
About the Company:
Headquartered in California, U.S.A., GSPANN provides consulting and IT services to global clients. We help clients transform how they deliver business value by helping them optimize their IT capabilities, practices, and operations with our experience in retail, high-technology, and manufacturing. With five global delivery centers and 2000+ employees, we provide the intimacy of a boutique consultancy with the capabilities of a large IT services firm.
Role Purpose:
Own operational SSDLC for 180 in-house apps + 900 third party/SaaS, drive adoption of Client SSDLC processes/tools, integrate security in Agile/DevOps/CI CD, coordinate remediation, and deliver pre release security reviews and monthly reporting.
Job Position: Application Security Specialist (L3) – SSDLC Operations
Experience Required: 7 to 12 Years.
Location: Hyderabad/Gurugram
Primary Tools: Apiiro ASPM, GitHub Advanced Security (CodeQL, Secret scanning, Dependabot), Checkmarx, SD Elements, Jira/Confluence, GitHub Actions.
Key Responsibilities
• Drive SSDLC adoption across design→build→test→release→operate
• Conduct security reviews before release and enforce gates
• Integrate SAST/SCA/Secrets (Checkmarx, GitHub AS) and ASPM (Apiiro) into CI/CD (GitHub Actions/PR checks)
• Coordinate DAST enablement with DAST Ops; ensure pipelines block on critical findings
• Triage findings; create Jira remediation workflows; track SLA fixes and escalate delays
• Maintain vulnerability dashboards (Jira/Confluence, Apiiro)
• Provide developer training and Security Champions enablement
• Perform security assessments of third party/SaaS apps
Required Skills & Experience
7 to 12 years in AppSec/SSDLC operations; hands on with Apiiro, GitHub Advanced Security (CodeQL, secrets), Checkmarx, Jira/Confluence; robust CI/CD experience (GitHub Actions), SAST/SCA/DAST pipelines; vendor coordination; ability to coach developers (Java/.NET/JS/Python).
Systems Access & Request Process
Apiiro: Project Admin via Jir
📌 Application Security Specialist (Hyderabad)
🏢 GSPANN Technologies
📍 Hyderabad