Information Security Analyst:
- Gurgaon, India; Bengaluru, India; Noida, India
- Information Technology
- 327729

About the Role:
Grade Level (for internal use):
08
Job Title: Cyber Security Analyst - Application Security & Supply Chain
Experience - 1-3 Years

About the Role

This position offers a great opportunity for early-career professionals to deepen their expertise in AppSec while contributing to secure development practices and supply chain risk management.

Key Responsibilities:
- Perform hands-on Application Security assessments including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and manual code reviews.
- Lead and support Software Supply Chain Security initiatives:
- Dependency vulnerability management
- SBOM (Software Bill of Materials) generation and analysis
- Secure CI/CD pipeline security
- Code signing, artifact repository security, and open-source risk assessment
- Review and secure build pipelines, container images, and third-party libraries.
- Work closely with development,



DevOps, and infrastructure teams to embed security into the SDLC.
- Monitor and triage security findings from various AppSec tools.
- Support Cloud Security posture reviews (basic knowledge required) - IAM, network security, and cloud misconfigurations.
- Prepare transparent security reports, risk assessments, and remediation guidance for stakeholders.

Requirements:
- 1-3 years of experience in Cybersecurity with strong hands-on exposure in Application Security.
- Practical experience in Software Supply Chain Security (SCA tools, dependency analysis, SBOM) is highly preferred.
- Basic to working knowledge of Cloud Security (AWS, Azure, or GCP).

Technical Skills:
- Proficiency with AppSec tools:
- SAST: SonarQube, Semgrep, Fortify, Checkmarx
- DAST: OWASP ZAP, Burp Suite
- SCA: Snyk, Black Duck, Dependabot, Trivy
- Others: GitHub Advanced Security, GitLab Ultimate, etc.
- Good understanding of OWASP

📌 Information Security Analyst (Gurugram)
🏢 S&P Global
📍 Gurugram