Security Architect

Skill - Security Architect

Location - Delhi

Exp - 10+ yr

Roles and Responsibilities

• Strong knowledge and understanding of OWASP Top-10 vulnerabilities • Hands-on experience on SAST (Static Application Security Testing), secure code review and manual code review to identify software vulnerabilities and to perform false positive analysis • Hands-on experience managing and performing manual & automated SAST using variety of tools and frameworks like - Fortify, SonarQube, Checkmarx etc. • Hands-on experience in code review of JAVA, .Net , Android, etc. • Hands-on experience on open-source code review tools • Hands-on in performing Threat Modelling • Good knowledge of mitigations to fix security vulnerabilities like SQL Injection, Cross-site Scripting, Command Injection, CSRF,Path Traversal, XXE injection etc. • Good Knowledge of Secure SDLC methodology and Threat Modelling • Good Knowledge of DevSecOps ,CI/CD Pipelines • Analyse and improve security features and security solutions for a wide range of applications • Candidate must have development and security background and good secure coding skills to ensure coding best practices • To coordinate & work with internal stakeholders and provide consulting as SME. Close interaction with developer to implement security fixes. • To develop new technical capabilities within team through internal trainings • Review, upgrade and document corporate application security policies • Hands-on experience on manual and automated application security testing including web applications, Mobile applications (Android/IOS/Hybrid), and APIs. • Hands on experience on tools like BurpSuite Pro, AppUse, OWASP ZAP ,WebInspect ,APKtool, Drozer, Dex2jar, AppScan, OpenVAS, Kali Linux, Dex2Jar etc • Hands on experience on SOAPUI and Postman.

• Hands on experience to define custom payload to configure security rules. • Learning and relevant certifications. • Experience in reviewing security assessments reports.