AppSec SAST & DAST

Role & responsibilities:

You are responsible for adhering to the defined operating procedures and guidelines in operating the application

security services in the Managed Services model, which includes the following:

• Understand and be compliant with the Service Level Agreements defined for the DevSecOps services;

• Understand and deep knowledge of application security engineering principles, and helping clients

development team and function to follow secure development practices which includes primarily

monitoring and performing the security design review, architecture review, threat modeling, security

testing, secure code review, secure build processes;

• Well versed with the application deployment and configuration baselines, and understanding of how

the application environment operates in a secure environment and how exceptions are handled during

operations;

• Facilitate use of technology-based tools or methodologies to continuously improve the monitoring,

management and reliability of the service;

• Perform manual and automated security assessment of the applications;

• Involved in triaging and defect tracking process with the development team and helping the team to

fix issues at the code level based on the priority of the tickets;

• Be a liaison between the Application development and infrastructure team, and integrate the

processes between infrastructure monitoring and operations processes with the secure

development/testing and management processes;

• Identifying, researching and analyzing application security events which may include emerging and

existing persistent threats to the client's environment; and

• Performing active monitoring and tracking of application related threat actors and tactics, techniques

and procedures (TTPs), that could likely cause an impact to client organization