Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
5-7 years of relevant experience in application security and/or vulnerability management.
Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business‑logic vulnerabilities.
Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
Familiarity with NIST, MITRE ATT&CK;, and CIS benchmarks.
Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
Excellent documentation, communication, and stakeholder engagement skills.

Responsibilities

Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate,



actionable, and relevant to application risk.
Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
Manage multiple application security initiatives concurrently while meeting strict timelines in a rapid paced environment.
Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
Support threat modeling and applicati

📌 Cyber Security Consultant (India)
🏢 Infosys
📍 India