Security Testing
- Conduct Static Application Security Testing (SAST) and Software Composition Analysis (SCA)
- Perform Dynamic Application Security Testing (DAST) and Interactive Application Security Testing (IAST) for deeper analysis of vulnerabilities during runtime
- Execute Mobile Application Security Testing and API Security Testing to safeguard against OWASP Security risks
Vulnerability Management and Threat Mitigation
Identify, prioritize, and remediate vulnerabilities through Vulnerability Assessments and Penetration Testing (VAPT)Identify and mitigate vulnerabilities aligned with the latest OWASP Top 10 risks, including Injection, Broken Access Control, and Insecure DesignAssess and remediate vulnerabilities by OWASP Application Security Verification Standard (ASVS)Cloud Security
Secure cloud environments hosted on AWS and Azure, adhering to CIS Benchmarks and NIST Cybersecurity Framework standardsCompliance and Regulations
Ensure application and infrastructure compliance with standards such as PCI DSS, HIPAA, and GDPRConduct regular assessments to align with SANS Top 25 Software Errors, NIST SP 800-53, and CIS ControlsDevSecOps Integration
Embed security practices within the Secure Software Development Lifecycle (SDLC) by automating security checks and remediationCollaborate with DevOps teams to integrate security tools and testing into the CI / CD pipelines using Jenkins and Azure DevOpsRequired Skills and Qualifications
Technical Proficiency
Legacy technologies : Java, .NETModern technologies : React, Node.js, Python, PHP, Ruby / Rails, Angular, etcCMS experience with Magento-Adobe and AvocodeCloud Skills
Expertise with AWS and Azure cloud platformsSecurity and Compliance Knowledge
Strong understanding of OWASP Top 10, OWASP ASVS, PCI DSS, HIPAA, GDPR, CIS Benchmarks, and NIST Cybersecurity FrameworksFamiliarity with SANS Top 25 Software Errors and their remediation strategiesSecurity Testing Expertise
Proficiency in SAST, SCA, DAST, IAST, and penetration testing techniquesExperience in Threat Modeling to proactively identify and mitigate risksStrong knowledge of VAPT, mobile, and API security testingDevSecOps and SDLC Integration
Expertise in implementing Secure Software Development Lifecycle (SDLC) practicesProficiency in integrating security tools with CI / CD pipelines using Jenkins and Azure DevOpsSoft Skills
Excellent communication skills to bridge the gap between technical and business teamsAbility to articulate technical issues to both technical and non-technical audiences