Job Description
Job Responsibility
- To lead the Applications Security Testing related activities, providing technical assessment of scope, principal security concerns and testing methodology to relevant stakeholders.
- Conduct Static Application Security Testing(SAST) Scans and Software Composition Analsys(SCA)
- Perform automated tool scanning
- False Positive Elimination
- Execute manual reviews
- Managing DevSecOps pipeline for major customer ensuring strong security measures and standards meeting business requirements.
- Providing security consulting to various teams (design, development) on security measures to be incorporated in the requirements during design, development phases and the best practices to be followed for a secure application development.
- Recommended process improvement to optimize security architecture lifecycle removing silos introducing compliance layer onto the review process.
Experience and Qualifications required
- Has at least 7 years of experience in IT security and preferably in Application security testing and Development.
- Experience in Application Security Assessment, Secure Code Review– DAST & SAST
- Experience in SAST (Static Application Security Testing) tools like IBM AppScan Source, HP Fortify, Checkmarx etc
- Experience to execute on various security tools like Checkmarx, Fortify, Nessus, Veracode, IBM appscan etc.
- Expert in secure programming Coding for the languages like java, C,C++, .Net, python etc.
- Expert in Security Frameworks to protect the applications from various attacks
- Has excellent written and verbal communications skills and able to work with technical experts in the industry as well as able to connect with business stakeholders at a non-technical level
͏
Areas of responsibility
Triaging and resolution of tickets-Provide resolution to high priority incident (P2) tickets, performing advanced troubleshooting and root cause analysis to ensure timely closure.
SLA Monitoring-Ensure SLA compliance for assigned technology areas and ensure proactive escalation management.
Performance tuning and optimization-Analyse system performance data, coordinate findings on system behaviour, and support capacity planning initiatives to enhance overall system efficiency.
Perform system Improvements-Create mitigation measures to evaluate new tools or improvements by collaborating with technical teams.
Handling disaster recovery-Perform security assessments and recovery drills, and implement necessary controls to ensure compliance with established security standards.
Reporting and stakeholder engagement-Participate in weekly and monthly service review meetings, provide updates on performance and issues, and support stakeholder communication to ensure transparency and service alignment.
Team Management-Collaborate with team members to resolve open tickets and service requests.
Knowledge base and continuous learning Contribute to updating SOPs, knowledge articles and maintaining the knowledge repository for the purpose of future ticket resolution.
͏
͏
͏
Mandatory Skills: Application Security Code Review - SAC .
Experience: 5-8 Years .
Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.