Job description

The role involves conducting security assessments, threat modeling, and secure coding, as well as providing security training to development teams. Requires expertise in application security, scripting languages, and cloud technology with 2-4 years of security experience.

Responsibility

• Security Assessments: Examine products to discover vulnerabilities and collaborate to demonstrate exploitability and risks.
• Security Assessments: Engage with developers to develop workarounds/mitigation plans and ensure implementation per policy.
• Security Assessments: Drive thematic security assessments for business impact vulnerabilities.
• Threat Modelling: Engage with development teams to conduct secure design reviews.
• Threat Modelling: Conduct focused workshops on threat modeling.
• Secure Coding: Manage integration and automation of SAST in the DevOps pipeline.
• Secure Coding: Build and propagate secure coding principles.
• Secure Coding: Be the go-to person for solving secure development issues.
• Training: Deliver training programs at various organizational levels.
• Training: Conduct workshops/security tech talks to disseminate security knowledge.

Qualifications

• Master or Bachelor of Engineering in Computer Science / Engineering.
• Masters in Computer Science.
• Bachelor of Science in Computer Science.
• 2 to 4 years of application security experience.
• 1+ years of software development experience is desirable.
• Expert-level knowledge of multiple classes of vulnerabilities.
• Good knowledge of SAML / OAuth / Open ID Connect.
• Good knowledge of programming/scripting languages such as Java, Ruby, and Python.
• Good knowledge relating to services/technology relating to the cloud.
• Ability to automate security testing.
• Good understanding and knowledge of web frameworks and architecture.
• Ability to communicate and interpret security vulnerabilities.
• Experience conducting security assessments in cloud platforms.
• Published CVEs / research papers/articles about application layer security.
• Experience in integrating and automating security in DevOps.
• Good security development experience in Java / Ruby on Rails.