Software Engineer Application Security

Location: Apply only if interested in Gurgaon Location

Notice Period: Not more than 60 days

We are looking for Application Security Engineer with expertise in SAST, DAST, Penetration Testing, Secure Code Review, Secure Design Review. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of service offering.

Exp 3-4 years maximum (B1 only)

Duties and Responsibilities

A strong and thorough understanding of Application Security with a passion to innovate

Strong knowledge experience with Vulnerability Assessment and Penetration Testing

Strong knowledge to automate DAST/SAST solutions scanning and reporting

Performing Manual Secure Code Review and Secure Design Review

Strong knowledge of OWASP Top 10 web and the ability to effectively communicate methodologies and techniques with development teams

Good understanding of Java, Python, etc.

Hands-on experience of Web Application Scanning Tools (both Open Source and Commercial)

Knowledge of performing Threat Modeling and Application Design Reviews

Good understanding of SSDLC and Secure Software Delivery Frameworks

Provide guidance to development teams for remediating application security vulnerabilities

Should have at least one professional certification but not limited to CEH/Security+/eJPT or equivalent

Good to have certifications like OSCP/eWAPTX/OSCE/CRTE/eCPTX or equivalent

Perform the following functions as individual assignments or as part of a team:

You will be responsible for doing Penetration testing, SAST, DAST, Manual Secure Code Review and Secure Design Review

Make suggestions for security improvements

Enhance existing methodology material

Good to have working experience on:
• Good understanding of Cloud Security Concepts AWS/Azure