HIGHLIGHT:

This role is based in Kurla and requires working onsite from the office five days a week.

Job Overview:

Application Security Engineer need to perform application security assessment, code review, vulnerability management and work closely with development teams, product managers, and third party vendors to ensure application and code developed are secure.

QUALIFICATION:

Graduate (BSc. IT, BE, B Tech.) with Information Security Certifications CEH (Certified Ethical Hacking), Certified Application Security Engineer (CASE), CISSP.

EXPERIENCE:

- Candidate must have strong experience in application security assessment, threat modeling, code review, static and dynamic testing.

- Candidate must have strong understanding of common security libraries, security controls, and common security flaws.

- Candidate must have experience on performing application vulnerability Management, penetration testing, application and API security assessment.

- Candidate must have experience with OWASP, static/dynamic analysis, and common security tools.

- Candidate must have basic knowledge of development or scripting experience.

- Candidate must have experience of identifying security issues through code review during entire SDLC cycle.

- A basic understanding of network and web related protocols (such as TCP/IP, UDP, HTTP, HTTPS, protocols).

- Experience of working with developers.

- Candidate must have good communication skills (written and verbal both).

- He / She must have 5 - 10 Years of experience in Application security assessment and application vulnerability management with strong academic background.

- Ability to stay current with emerging threats, security risks and potential impacts to the business.

- Should have strong exposure on application security assessment, code review, secure development practices and application security tools and technologies.

- Candidate should have at least one Information security certification CEH, CASE, or CISSP.

KEY RESPONSIBILITIES:

- He / She will be responsible for performing application security assessment, code review, API security assessment.

- Participate in and support application security reviews and threat modeling, including code review and static / dynamic testing.

- Ensure that security across all aspects of the software is uniform by setting up checkpoints.

- Perform threat modeling for applications determine the potential threats and vulnerabilities to an application and identify points where applications are most vulnerable.

- Based on assessment results explore the threats that each application is exposed to and ranks them on a severity scale.

- Recommend the countermeasures that could be developed to secure application.

- He / She need to facilitate and support the preparation of security releases.

- He / She need to support product and development teams in the area of application security.

- Assist in creation of best security development practices and security trainings for developers.