SR SPECIALIST INFORMATION SECURITY

"The right candidate will have total 9 to 12 years of experience in software development design & development / coding and engineering practices along with extensive experience in DevSecOps and product secure development lifecycle (Secure SDL) and methodologies implementation & governance.

Good knowledge of infrastructure as code, end-to-end fully-automated CI / CD pipelines, from code commits to production and security of repositories (like GitHub, BitBucket etc), pipelines, build / release tools (like Jenkins, GitHub actions etc) and methodologies in CI / CD pipelines.

Proficiency in scripting, including Python, Groovy, Helm, shell scripts, Perl etc to support the automation and continuous improvement of processes

Hands on experience in DevSecOps, Secure SDLC including Threat Modeling, Vulnerability assessment. Security Testing, Security Scans and Security compliance like PCI-DSS / GDPR / ISO. Exposure on Webservices( SOAP / REST) security assessment will be a definite plus

Experience in full DevSecOps CI / CD pipeline, Agile methodology, container security, APIs, and microservices.

Knowledge of OWASP Top10, SANS Top25, CWE and CVE / Mitre, along with hands-on practical experience in development & testing for vulnerabilities and implementing remediation."