Specialist - CyberSecurity

Role description About the Role We are seeking a highly motivated and skilled Mid to SeniorLevel Application Security Engineer to join our dynamic team in India The successful candidate will be instrumental in identifying analyzing and mitigating security vulnerabilities throughout our software development lifecycle SDLC This role requires a strong understanding of application security testing methodologies handson experience with security tools and proficiency in Java programming You will work closely with development operations and security teams to ensure the delivery of secure software through robust automation practices Responsibilities Perform Static Application Security Testing SAST to identify security flaws and provide actionable recommendations for remediation Conduct Software Composition Analysis SCA to detect and manage vulnerabilities in opensource and thirdparty components used within our applications Execute Dynamic Application Security Testing DAST on running applications to uncover runtime vulnerabilities and misconfigurations Analyze security scan results triage findings and collaborate with development teams to ensure timely and effective remediation of identified vulnerabilities Assist in integrating automated security testing tools into CICD pipelines to achieve continuous security validation Contribute to the enhancement optimization and automation of existing security processes and tools seeking opportunities to increase efficiency and coverage Document security findings remediation steps and security policies including automation playbooks and configurations Participate in security code reviews and provide secure coding guidance to developers emphasizing automated checks and preventative measures Required Skills and Qualifications Education Bachelors degree in computer science Information Technology Cybersecurity or a related field Experience 46 years of experience in application security vulnerability management or a similar role SAST Expertise Handson experience with SAST tools eg SonarQube Checkmarx Fortify and the ability to interpret and act on their findings SCA Expertise Proficiency with SCA tools eg Nexus IQ Snyk WhiteSource for identifying and managing opensource vulnerabilities DAST Expertise Practical experience with DAST tools eg OWASP ZAP Burp Suite Acunetix and understanding of common web application vulnerabilities OWASP Top 10 Programming Language Strong handson experience and proficiency in Java development Security Concepts Solid understanding of secure coding principles common attack vectors and defense mechanisms SDLC Knowledge Familiarity with various stages of the Software Development Lifecycle and experience integrating security into each phase ProblemSolving Excellent analytical and problemsolving skills with a keen eye for detail Communication Strong verbal and written communication skills to articulate complex security issues to both technical and nontechnical audiences Collaboration Ability to work effectively in a teamoriented environment