Experience8+ years.

Job Type-Contract with client.

Location-Hyderabad/Bangalore.

Job Description-.

Roles and Responsibilities:

- Perform SAST/SCA/DAST scans using industry vulnerability scanner.

- SAST/SCA - Veracode, using supplied compiled binary, configure scan platform to correct scan for both static code CWE's as well as SCA derived CVEs.

- Work will include coordination with app owner to ensure all branches of code are included in compiled binary file.

- DAST - Work begins with crawling the target application to identify existing directory and file structure.

- Once identified, execute DAST scan using HCL product to identify dynamic issue only visible during code execution.

Primary / Mandatory Skills.

- Overall - 8+ years of IT experience.

- 7+ years of application security Experience.

- 5+ years of Application Security testing Experience.

- Bachelor's degree required.

- Deep familiarity with the OWASP Top 10 and other security concerns for web applications.

- Deep Understanding of OWASP Application Security Verification Standards (ASVS).

- Deep understanding of SAST, DAST, SCA Scanning practices.

- Experience In Scanning Leveraging Veracode, Appscan or Other Enterprise Tools.

- Understand how to interpret and assess CVEs (Common Vulnerability and Exposures) and CWEs (Common Weakness Enumeration) as found by scanning tools.

- Understanding of SAST, DAST tools and dependency scanning tools.

- Experience working/integrating with secret management systems.

- Advanced knowledge of front-end and back-end web application development in at least one technology stack (.NET, Java, PHP, Ruby/Rails, Angular, Node.js, etc.

- Track record of staying current with trends, techniques, tools, and processes that drive improvement of security posture of applications.

- Strong documentation skills.

- Excellent verbal and written communication skills, with proven technical writing abilities (English language proficiency required).

- Team-oriented thinking with demonstrated ability to produce high-quality work as part of a fast-paced, dynamic team.

- Proven ability to communicate, collaborate, and present effectively with teams and individuals in different disciplines or areas.

- Technical Skills: SAST, DAST, SCA.

- Must have skills: Application Security/SAST/DAST/SCA