HYDERABAD · FULLTIME
Cybersecurity Specialist II - Application Security
Bristol-Myers Squibb
Hyderabad · onsite · Posted 4d ago
Sourced from
Undisclosed4–9 yrsfulltimeHyderabad
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
Job Summary
Key Responsibilities
Required Qualifications and Experience
Preferred Qualifications
Core Competencies
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
BMS is seeking a Cybersecurity Specialist II - Application Security with 4+ years of experience and a primary focus on penetration testing. This role will perform hands-on security assessments of web applications and APIs, validate vulnerabilities, clearly communicate risk, and partner with development teams to support remediation and retesting. The role will also contribute to DAST operations and the broader secure software development lifecycle.
Key Responsibilities
- Plan and perform penetration testing of web applications and APIs using manual and automated testing techniques.
- Identify, validate and document security vulnerabilities, including clear evidence, business impact and practical remediation guidance.
- Conduct retesting to confirm remediation and support risk-based decisions for unresolved findings.
- Partner with application owners, developers and architects to explain vulnerabilities and improve secure design and coding practices.
- Operate and improve DAST capabilities, review automated findings and reduce false positives.
- Support threat modeling and security design reviews for new or significantly changed applications.
- Develop scripts and lightweight automation using Python, JavaScript or similar languages to improve testing and reporting.
- Maintain assessment records, track findings through closure, and contribute to metrics, standards and penetration-testing playbooks.
- Support SAST and SCA finding validation when required and collaborate with the broader Application Security team.
Required Qualifications and Experience
- 4+ years of hands-on application security experience, with strong experience in web application and API penetration testing.
- Practical knowledge of OWASP Top 10, common API weaknesses, authentication, authorization, session management and input-validation vulnerabilities.
- Experience using industry-standard penetration-testing tools and performing manual validation beyond automated scanner output.
- Ability to produce clear, reproducible findings and communicate remediation guidance to technical stakeholders.
- Working knowledge of DAST, secure SDLC, vulnerability management, and risk-based prioritization.
- Familiarity with threat modeling methodologies and secure-by-design principles.
- Basic coding or scripting skills in Python, JavaScript, Java, or a similar language.
- Ability to work independently, manage assessments, and collaborate effectively with development teams.
Preferred Qualifications
- Familiarity with AI Red Teaming methodologies and AI security testing frameworks such as the OWASP Top 10 for LLM Applications.
- Experience testing modern web technologies, REST APIs, microservices, and cloud-hosted applications.
- Exposure to SAST, SCA, CI/CD security integration and DevSecOps practices.
- Knowledge of cloud security fundamentals across AWS, Azure, or Google Cloud Platform (GCP).
- Exposure Agentic AI workflows and AI-related terminology.
- Strong knowledge of OWASP Top 10 for Web Applications and OWASP API Security Top 10, with familiarity with the CISA Known Exploited Vulnerabilities (KEV) Catalog and industry security frameworks such as NIST and CIS Controls.
- Experience with AI-assisted security testing or testing AI/LLM-enabled applications.
- Relevant certifications such as OSCP, GWAPT, GPEN, eWPT, CEH or equivalent.
Core Competencies
- Hands-on penetration-testing expertise
- Analytical thinking and attention to detail
- Clear technical writing and risk communication
- Collaboration, ownership and continuous learning
- Curiosity-driven approach to penetration testing, with the ability to think like an attacker and uncover non-obvious vulnerabilities.
- Security research mindset with a passion for identifying emerging threats, novel attack techniques, and evolving vulnerability trends.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
Automationapisdata privacyautomated testingCisaapi securitylosgoogle cloud platformamazon web servicescehDevsecopsdastai securityLarge Language Models (LLMs)JavascriptcloudCloud SecurityCyber SecurityApplication SecurityJavaMicrosoft AzureArtificial Intelligence
Section · Company
About Bristol-Myers Squibb
Bristol-Myers Squibb
Pharma
375
employees
1887
139 years old
New York
United States
₹19.1L PA avg
Avg at Bristol-Myers Squibb
About
We are a global biopharmaceutical company whose mission is to discover, develop and deliver innovative medicines that help patients prevail over serious diseases. At Bristol Myers Squibb, we work every day to transform patients’ lives through science. We combine the agility of biotech with the reach and resources of an established pharmaceutical company to create a global leading biopharma company powered by talented individuals who drive scientific innovation.
We have the brightest people in the industry and believe that their diverse experiences and perspectives help to bring out our best ideas, drive innovation and achieve transformative business results. Each day, our employees around the world work together for patients – patients are at the center of everything we do. They inspire us. They are the reason we come to work each day.
We are proud of the advancements we have made in oncology, hematology, immunology, and cardiovascular disease, and we are dedicated to helping patients prevail over serious diseases through our diverse and promising pipeline and new scientific platforms. We are pursuing therapies at the forefront of scientific discovery with the goal of bringing an exciting new generation of life-changing treatments to patients. We aspire to be at the center of a vibrant healthcare innovation ecosystem, where academic research centers, biotech, and biopharma companies all contribute to continued scientific advancement.
Industries
PharmaBiotech & Life sciences
Employee ratings
10 reviews
3.7/ 5
Culture
2.6
Career growth
2.2
Work-life
3.1
Employees rate it well for
Work-Life Balance38Compensation & Benefits37
Find them on