Information Security Consultant

You will be joining our internal security group as an Information Security Engineer (Consultant) at thoughtworks. Your primary focus will be on building secure products and embedding security practices within fast-paced delivery teams. As an Information Security Engineer, you will have the opportunity to shape secure engineering practices across the organization. **Key Responsibilities:** - Act as a Security Advisor for delivery teams throughout the Software Development Life Cycle (SDLC) - Drive Threat Modeling and conduct architectural security reviews - Ensure a strong Cloud Security posture with a preference for GCP - Integrate DevSecOps practices including SAST, DAST, and automation - Conduct Application Security Testing and provide recommendations for fixes - Perform manual vulnerability assessments using tools such as Checkmarx, Burp, Snyk, and Wiz - Support vulnerability and patch management, as well as secrets management **Qualifications Required:** - Minimum 2 years of experience in Application Security (AppSec) or Security Engineering - Strong knowledge of OWASP, threat modeling, and SDLC security - Hands-on experience with SAST/DAST, dependency checks, and container security - Good understanding of Cloud Security, with a preference for GCP - Basic knowledge of networking, OS security, and firewalls - Strong communication skills and a risk-awareness mindset If you are passionate about Information Security and have the required qualifications, you can apply by sending your details to amrutha.m@sbs-global.com. Join us in securing the future together. (Note: No additional details about the company were provided in the job description.),