- Source Code Review (SCR). Annually and Adhoc as per requirement.
- Maintenance and management SCR tool and manage the user creation/deletion/dormant user removal.
- Application Security (Web/Mobile). Conduct application security (Appsec) assessment for all in-scope internal and external web, android and iOS applications once annually or when the change in modules/UI has been made (whichever applicable first).
- Maintenance and management Appsec tools and manage the user creation/deletion/dormant user removal.
- Follow up with OEM in case of hardware failure, firmware upgrade, raised ticket, and ensure OEM SLA is met.
Key skills required
- 3-8 years of experience.
- Conduct Appsec on Production Workplace.
- Provide external closure report (in PDF) with findings, impact,
recommendations and POCs.
- Assist & Support team for closing the vulnerability (if any)
- External Assessment (Onsite & Offsite) quarterly, monthly rescan should be performed.
- Assessment should be performed based on security standards such as OWASP Top 10, NIST.
- Detailed Management level MIS and Dashboard creation to be captured on fortnight basis.
- Master's or Bachelors degree in Cybersecurity, Information Technology, or related field.
- Location: MumbaiRole & responsibilities