01Overview
Role & responsibilities
Perform security best practices review followed by Development team
Perform SCA and report vulnerabilities and recommendations
Perform Tech Stack review and report findings along with recommendations.
Perform code review (supporting SAST Tool) and remove false positives if any, and report valid security issues to development team
Perform DAST on the various applications and remove false positives if any, and report valid security issues to development team
Contribution to RFP process and assist in Implementing SSDLC Tools.
Escalate issues and risks and proactively takes ownership for resolution
Track milestones and deliverables and provide regular status reporting to respective stakeholders
Preferred candidate profile
Experience in the following process areas:
Secure SDLC Methodologies for Waterfall/ Agile software development (Mandatory)
Should be well-versed with Security best practices like OWASP and NIST guidelines (Mandatory)
Ability to perform security review of microservices architecture, API Security (Mandatory)
Hands on experience on Source Code reviews - SAST solution (Mandatory)
Hands on experience on Agile Application Security Testing - DAST (Mandatory)
Hands on experience in Software Composition Analysis - SCA (Mandatory)
Hands on experience in performing Tech Stack Review -(Mandatory)
Comfortable working in an environment that practices Agile development, engaging Product Owner and other stakeholders
Good knowledge of Cloud platform/VMware
Ability to identify vulnerabilities & threat actors in the application cycle and communicate effectively to the stake holders.
Threat Modelling PASTA, STRIDE etc (Good to Have)
Possesses ability to quickly understand the technical and functional aspects of the project to be able to communicate effectively with different stakeholders.
Excellent written and verbal communication skills in English, high integrity, strong work ethic and ability to empathize with the customer.
Ability to work effectively in a fast-paced, project-oriented workplace
Ability to prioritize and execute tasks
Ability to handle sensitive and confidential information
Solid analytical and problem-solving skills .
