Job Title: Application Security Lead

Exp: 7 + Years - P3 ( Application Security Engineer )

10 + Years - P4 ( Application Security Lead ) z

Loc: Hyderabad

Work Mode: Hybrid

Duration: 12 Months

Note: We are looking for immediate joiners.

If interested, please share your resume to the mail ID below [email protected]

:

- Expert in Dynamic Application Security Scan/Analysis (DAST)
- Expert in Static Application Security Scan/Analysis (source code review) (SAST)
- Knowledge of Software Composition Analysis (SCA)
- Supply Chain Security and SBOM evaluation
- Good Knowledge of DevSecOps (Secure CI/CD integration)
- Vulnerabilities Assessment and Penetration Testing (VAPT) at application

- Valuable knowledge of OWASP Top 10

• Mobile Application Security testing experience (Android & iOS)
- Expert in Vulnerability assessment of web applications (internal & external)
- Application Penetration Testing
- API Security Testing
- Proficient with manual and automated scanner approaches
- Knowledge of software vulnerability remediation techniques and libraries used in applications, Programming knowledge etc.
- Knowledge of vulnerability scoring systems (CWE, CVSS/CMSS), CIS, etc.
- Management and configuration of SAST,



SCA & DAST Testing Tools
- Vulnerability Triage Services & Vulnerability Tracking
- Preparing security advisories and defining the severity levels for the vulnerabilities
- Scanning, validation and reporting of vulnerabilities on daily and monthly basis
- Preparing security reports for the management
- Remediation Advisory Support

Education:

A bachelor or Masters in degree in Technology is a must. English proficiency both reading & writing is must

Technologies /Tools:

- Burp suite, fortify (SCA & Web Inspect), BurpSuite Pro, Accunetix, Veracode, Checkmarx, Qualys WAS, Tenable .io Web Application, Nessus,

Certifications:

Desirable: OSCP, OSWE

Compulsory: Certified Ethical Hacker (CEH), B Tech

Other requirements:

- Good Communication skills
- Managing projects and schedules.
- Assisting in the development of exploits for complex vulnerabilities.
- Improving testing techniques and methodology via original research, custom tool development, defining new testing standards, and aligning testing procedures with various industry standards (OWASP Top 10, OWASP ASVS, NIST 800-53, etc.).

📌 Application Security Engineer/ Lead (Hyderabad)
🏢 CIEL HR
📍 Hyderabad