02 Oct
|
HCLSoftware
|
Bengaluru
02 Oct
HCLSoftware
Bengaluru
Please share CV to monica_sharma@ with the below details:
Total Experience- Should be 6+ years
Current CTC-
Expected CTC-
Notice period-
Location-
Mandatory skills- hands-on experience in penetration testing, SAST, DAST, SCA and threat modelling.
Application Security Engineer/Lead-
Requirement-
Hands-on experience in Threat Modelling using STRIDE for identifying attack vectors, trust boundaries, and mitigation strategies. Strong practical experience in secure code review, vulnerability remediation, and security testing across up-to-date applications. Hands-on experience identifying and exploiting OWASP Top 10 vulnerabilities across Web, API, and LLM-based applications. Practical implementation experience with OAuth 2.0, Open ID Connect (OIDC), JWT security, and cryptographic controls. Hands-on exposure to Responsible AI, AI/ML threat modelling, prompt injection testing, and LLM security controls. Experience securing software supply chains, CI/CD pipelines, containers, and cloud-native platforms. Practical experience performing penetration testing, vulnerability assessments,
and remediation validation. Hands-on experience with SAST, DAST, SCA/Open Source scanning, and code quality/code smell management tools. Strong working knowledge of AWS, Azure, and GCP native security services and cloud security best practices. Hands-on experience securing Kubernetes and container platforms, including image security, cluster hardening, admission controls, and runtime threat detection/response. Hands-on experience managing the PSIRT lifecycle, including vulnerability intake, triage, impact assessment, remediation coordination, disclosure and customer communication. Responsibilities-
Lead and Manage Secure Design review and Thread modelling for Applications ( On premise and Saa S based Applications) Develop and implement comprehensive security strategies to safeguard application systems. Define security best practices and standards and Lead Secure Software Development Lifecycle best pr
📌 Application security engineer (Bengaluru)
🏢 HCLSoftware
📍 Bengaluru