App sec
Number of Openings |
1 |
ECMS ID in sourcing stage |
532299 |
Assignment Duration |
12 months |
Total Yrs. of Experience |
7+ years |
Relevant Yrs. of experience |
5+ years |
Detailed JD (Roles and Responsibilities) |
Job Description: |
· Experience in application security with a focus on SAST/SCA | |
· Hands on experience in identifying False Positive from the automated tools results. | |
· Proficient in application security concepts and OWASP Top 10, SANS top 25 | |
· Resource should be good in identifying SAST vulnerabilities and perform false positive, true positive analysis. | |
· Technical Skills: Proficiency in SAST tools (Checkmarx, Veracode etc), Programming languages (eg: Java , Dot Net, Python) | |
· Familiarity with DevOps Practices / tools, Framework and API knowledge. | |
· Developer perspective: Understanding of development methodologies, secure coding practices and code review best practices. | |
· Knowledge on Rally Software ticking tool | |
Roles & Responsibilities: | |
· Review SAST reports to prioritize and validate vulnerabilities. | |
· Provide remediation guidance: Offer recommendations for fixing identified vulnerabilities. | |
· Collaborate with developers: Work with development teams to ensure false positives/vulnerabilities are addressed. | |
· Handle the project as well as BAU operations. | |
· Identify security flaws at an early stage of development. | |
· Identify security vulnerabilities in code that is no longer actively being developed. | |
· Automate large scan codebases efficiently and rapidly. | |
· Reduce costs by detecting and improving vulnerabilities. | |
· Comply with special regulatory requirements and guidelines. | |
· Increase code quality. | |
· Integration with CI/CD pipelines into the SDLC. | |
· Build in security rules and requirements from industry best practices. | |
· Mitigate risk and protect reputation. | |
| |
Mandatory skills |
App Sec |
Desired/ Secondary skills |
App Sec |
Domain |
Cyber Sec |
Max Vendor Rate in Per Day (Currency in relevance to work location) |
9500 INR/Day |
Work Location given in ECMS ID |
Mysore, Pune |
WFO/WFH/Hybrid WFO |
Hybrid WFO |
BG Check (Before OR After onboarding) |
After onboarding |
Is there any working in shifts from standard Daylight (to avoid confusions post onboarding) YES/ NO |
Yes |
