Job Description Job Responsibility
• To lead the Applications Security Testing related activities, providing technical assessment of scope, principal security concerns and testing methodology to relevant stakeholders.
• Conduct Static Application Security Testing(SAST) Scans and Software Composition Analsys(SCA)
• Perform automated tool scanning
• False Positive Elimination
• Execute manual reviews
• Managing DevSecOps pipeline for major customer ensuring solid security measures and standards meeting business requirements.
• Providing security consulting to various teams (design, development) on security measures to be incorporated in the requirements during design, development phases and the best practices to be followed for a secure application development.
• Recommended process improvement to optimize security architecture lifecycle removing silos introducing compliance layer onto the review process.
Experience and Qualifications required
• Has at least 10 years of experience in IT security and preferably in Application security testing and Development.
• Experience in Application Security Assessment, Secure Code Review– DAST & SAST
• Experience in SAST (Static Application Security Testing) tools like IBM AppScan Source, HP Fortify, Checkmarx etc
• Experience to execute on various security tools like Checkmarx, Fortify, Nessus, Veracode, IBM appscan etc.
• Expert in secure programming Coding for the languages like java, C,C++, .Net, python etc.
• Expert in Security Frameworks to protect the applications from various attacks
• Has excellent written and verbal communications skills and able to work with technical experts in the industry as well as able to connect with business stakeholders at a non-technical level