App sec

Number of Openings

1

ECMS ID in sourcing stage

532299

Assignment Duration

12 months

Total Yrs. of Experience

7+ years

Relevant Yrs. of experience

5+ years

Detailed JD (Roles and Responsibilities)

Job Description:

Experience in application security with a focus on SAST/SCA

Hands on experience in identifying False Positive from the automated tools results.

Proficient in application security concepts and OWASP Top 10, SANS top 25

Resource should be good in identifying SAST vulnerabilities and perform false positive, true positive analysis.

Technical Skills: Proficiency in SAST tools (Checkmarx, Veracode etc), Programming languages (eg: Java , Dot Net, Python)

Familiarity with DevOps Practices / tools, Framework and API knowledge.

Developer perspective: Understanding of development methodologies, secure coding practices and code review best practices.

Knowledge on Rally Software ticking tool

Roles & Responsibilities:

Review SAST reports to prioritize and validate vulnerabilities.

Provide remediation guidance: Offer recommendations for fixing identified vulnerabilities.

Collaborate with developers: Work with development teams to ensure false positives/vulnerabilities are addressed.

Handle the project as well as BAU operations.

Identify security flaws at an early stage of development.

Identify security vulnerabilities in code that is no longer actively being developed.

Automate large scan codebases efficiently and rapidly.

Reduce costs by detecting and improving vulnerabilities.

Comply with special regulatory requirements and guidelines.

Increase code quality.

Integration with CI/CD pipelines into the SDLC.

Build in security rules and requirements from industry best practices.

Mitigate risk and protect reputation.

Mandatory skills

App Sec

Desired/ Secondary skills

App Sec

Domain

Cyber Sec

Max Vendor Rate in Per Day (Currency in relevance to work location)

9500 INR/Day

Work Location given in ECMS ID

Mysore, Pune

WFO/WFH/Hybrid WFO

Hybrid WFO

BG Check (Before OR After onboarding)

After onboarding

Is there any working in shifts from standard Daylight (to avoid confusions post onboarding) YES/ NO

Yes