Talent.com
AppScan Product _Lead Security Expert _Remote Location
AppScan Product _Lead Security Expert _Remote LocationHCLSoftware • Delhi, IN
AppScan Product _Lead Security Expert _Remote Location

AppScan Product _Lead Security Expert _Remote Location

HCLSoftware • Delhi, IN
1 day ago
Job type
  • Remote
Job description

Greetings from “HCL Software” Is a Product Development Division of HCL Tech!!

"HCL Software” : - Is a Product Development Division of HCL Tech : That operates its primary Software Business. At HCL Software we Develop, Market, Sell and Support over 20 Product families in the areas of Customer Experience, Digital Solutions, Secure DevOps, Security & Automation.

About AppScan Product : -"HCL AppScan" is a comprehensive suite of Application Security Solutions for developers, DevOps, security teams and CISOs, with on-premises, on cloud, and hybrid deployment options. The suite includes various security tools that offer features such as vulnerability scanning, code analysis, and real-time threat detection, providing significant benefits in protecting software applications throughout their lifecycle. Office Location : HCL Software, Bangalore.

Work Preference : Hybrid Or Remote.

Job Summary : -

We are looking for a Lead Security Expert with 10+ Yrs experience in our AppScan Product team who possess the following skills :

Key responsibilities include : -

  • Discovering new vulnerabilities in application source code.
  • Developing automatic vulnerability detection procedures.
  • Demonstrating familiarity with at least one programming language (e.g., Java, C / C++, .NET) and multiple operating systems / RDBMS.
  • Providing security guidance for our products across new programming languages and frameworks.
  • Innovating and improving the security logic of AppScan products.
  • Collaborating with AppScan Research Lab teams.
  • Analysing AppSec results and identifying false positives.
  • Prioritizing high-priority issues based on severity and likelihood of exploit.
  • Understanding remediation techniques for various languages and frameworks.
  • Executing Source Code Analysis, Reverse Engineering, and Threat Modelling.

Desired skills and experience :

  • Experience with Static Analysis (SAST) tools and triaging application security results.
  • Proficiency in security remediation techniques and secure coding best practices.
  • Expertise with security standards like OWASP Top 10 and CWE / SANS Top 25.
  • Ability to articulate security threats to developers or auditors.
  • Ability to identify and provide examples of false positives and negatives in source code.
  • Experience with multiple operating systems and software attack / exploitation techniques.
  • Familiarity with defensive programming concepts.
  • Advantageous skills :

  • Experience with scripting or query languages (e.g., JavaScript, Python).
  • Experience creating Data and Process Flow diagrams.
  • Knowledge of Taint Analysis.
  • Experience with Architectural Risk Analysis, Threat Modelling, and Traceability Matrix.
  • Experience with reverse engineering and source-level analysis.
  • An academic degree in Computer Science.
  • Relevant certifications (e.g., OSWP, OSCP).
  • Other beneficial skills :

  • Security analysis of popular APIs / frameworks.
  • OO design skills, API / Framework analysis, Data Structure Algorithms / Graph Theory / Cryptography.
  • Experience with Opensource / Software Composition tools, Threat Modelling, or network security.
  • Membership in security-focused groups.
  • Professional or academic experience with Machine Learning or AI.
  • Knowledge of Networking, Telecommunications technologies, and protocols.
  • Strong reporting, presentation, and communication skills.
  • Experience working with distributed cross-functional teams and identifying / escalating risks.
  • A bachelor’s degree in computer science or equivalent.
  • Create a job alert for this search

    Lead Product • Delhi, IN

    Related jobs
    Senior Product Security Engineer [T500-20534]

    Senior Product Security Engineer [T500-20534]

    REA Cyber City • Gurugram, Haryana, India
    In 1995, in a garage in Melbourne, Australia, REA Group was born from a simple question : “Can we change the way the world experiences property?”. Fast forward 30 years, REA Group is a market leader ...Show more
    Last updated: 3 days ago • Promoted
    Lead Security Engineer

    Lead Security Engineer

    interface.ai • Ghaziabad, IN
    Our cutting-edge Generative AI-powered platform serves over 100 banks and credit unions, delivering hyper-personalized customer interactions across voice, chat, and employee-assisting solutions.To ...Show more
    Last updated: 30+ days ago • Promoted
    Security Operations & Security Architecture Lead

    Security Operations & Security Architecture Lead

    airtel • Gurugram, Haryana, India
    Own and elevate both day-to-day security operations and forward-looking security architecture for a large telecom environment. Run high-availability security programs (e.SOC, EDR, AppSec, VAPT) with...Show more
    Last updated: 3 days ago • Promoted
    Security Analyst

    Security Analyst

    GMG • Gurugram, Haryana, India
    GMG is a global well-being company retailing, distributing and manufacturing a portfolio of leading international and home-grown brands across sport, everyday goods, health and beauty, properties a...Show more
    Last updated: 3 days ago • Promoted
    Security (DevSecOps)and QA (Automation)

    Security (DevSecOps)and QA (Automation)

    PioVation GmbH • Delhi, IN
    If you care about European-grade safety, quality, and compliance, read on.Senior Security Engineer (DevSecOps).Application & cloud security (threat modeling, secure SDLC).Kubernetes security (netwo...Show more
    Last updated: 21 days ago • Promoted
    Senior Application Security Engineer

    Senior Application Security Engineer

    Sphera • Delhi, IN
    Sphera is a leading global provider of enterprise software and services that enables companies to manage and optimize their environmental, health, safety and sustainability.Our mission is to create...Show more
    Last updated: 11 days ago • Promoted
    Sap Security

    Sap Security

    TalentBridge • Delhi, IN
    Sap Security – Finance (SAP S / 4HANA Security).Months of Contract (With high possibility of Full Time).We are seeking an experienced SAP S / 4 Security Specialist with strong expertise in designing, b...Show more
    Last updated: 2 days ago • Promoted
    Azure Security Trainer

    Azure Security Trainer

    Vindal Tech • Delhi, IN
    Vindal Tech powered by SSMTS Company is hiring a high-impact Azure Cloud & Security Trainer to lead advanced, industry-aligned training programs that prepare learners for real-world cloud security ...Show more
    Last updated: 5 hours ago • Promoted • New!
    Director of Product Security

    Director of Product Security

    WhiteSlips Job Management Consultants • Delhi, IN
    Advance and execute a software supply chain security development strategy to include Identify security risk and vulnerabilities across client's supply chain partners as well and track implementatio...Show more
    Last updated: 5 hours ago • Promoted • New!
    AppScan Product _Sr. Performance Engineer _Remote Location

    AppScan Product _Sr. Performance Engineer _Remote Location

    HCLSoftware • Delhi, Delhi, India
    Remote
    Greetings from "HCL Software" "HCL Software” : - Is a Product Development Division of HCL Tech : That operates its primary Software business. At HCL Software we Develop, Market, Sell and Support over...Show more
    Last updated: 30+ days ago • Promoted
    Appscan Product _lead Security Expert _remote Location

    Appscan Product _lead Security Expert _remote Location

    HCLSoftware • Ghāziābād, Republic Of India, IN
    Remote
    Greetings from “HCL Software” Is a Product Development Division of HCL Tech!!.HCL Software” : - Is a Product Development Division of HCL Tech : That operates its primary Software Business.At HCL Soft...Show more
    Last updated: 18 hours ago • Promoted • New!
    Senior Product Security Engineer

    Senior Product Security Engineer

    REA • Gurgaon, India
    Lead Product Security Engineer.The Product Security team works alongside our Security Operations and Security Advisory teams to form the Group Security Tribe. Group Security works together to embed ...Show more
    Last updated: 30+ days ago • Promoted
    Security Operations Engineer

    Security Operations Engineer

    ITPeopleNetwork • Delhi, IN
    We are looking for a junior to mid-level.Saviynt Identity Access Management (IAM / IGA).CyberArk Endpoint Privilege Manager (EPM). The ideal candidate will assist in user access governance, email thre...Show more
    Last updated: 3 days ago • Promoted
    Lead Security Engineer

    Lead Security Engineer

    Arcana • Ghaziabad, IN
    As our Lead Security Engineer, you'll own and elevate Arcana's overall security posture - cloud, on-prem, and everything in between. You'll design and enforce policies, automate controls, and harden...Show more
    Last updated: 30+ days ago • Promoted
    AI Security Lead

    AI Security Lead

    Delphi Consulting Middle East • Ghaziabad, IN
    Join Delphi - Where Innovation meets transformation.At Delphi, we believe in creating an environment where our people thrive. We are committed to supporting your personal goals, family, and overall ...Show more
    Last updated: 5 days ago • Promoted
    Application Security Engineer

    Application Security Engineer

    Foodsmart • Delhi, IN
    Foodsmart is the leading telenutrition and foodcare solution, backed by a robust network of Registered Dietitians.Our platform is designed to foster healthier food choices, drive lasting behavior c...Show more
    Last updated: 30+ days ago • Promoted
    Information Security Leader

    Information Security Leader

    Cvent • Gurugram, Haryana, India
    Cvent is a leading meetings, events, and hospitality technology provider with more than 4,800 employees and ~22,000 customers worldwide, including 53% of the Fortune 500. Founded in 1999, Cvent deli...Show more
    Last updated: 3 days ago • Promoted
    AKS Container Security Engineer

    AKS Container Security Engineer

    Xsell Resources • Delhi, IN
    We are urgently seeking a Certified CKA / CKS Senior AKS Container Security Engineer for our healthcare client.Open to Immediate joiners only. We are seeking a highly skilled AKS (Azure Kubernetes Ser...Show more
    Last updated: 1 day ago • Promoted