Application Security Engineer Senior

Senior Application Security Engineer

Primary Responsibility

Ensure development teams understand the importance of application security principles

Continuously liaise with various product teams to analyse application vulnerabilities

Create and guide a team of local subject matter experts

Educate developers in secure coding techniques supporting toolsets and be self-reliant

Continuously evaluate vulnerabilities and risks in software platforms interfaces and applications

Perform SW Threat modelling Security Risk Assessment across various technology stacks

Create product security requirements and concepts; promote secure by design approach

Triage and remediation planning for discovered vulnerabilities aligned to program deadlines

Engage with internal and external partners to ensure alignment to commitments

Mentor SW teams on secure coding best practices industry standards tools and processes

Seek to build-in security during development of software systems and applications

Develop organisational processes and methods for security privacy and related assets

Ensure that organisational processes stay current; contribute to the Quality Management System

Your profile

Qualification : B.E / / M.E / (Computer Science or related fields)

Experience of at least 10 years in software design and coding

Experience of at least 5 years in application security or related areas

Familiar with OWASP (Open Web Application Security Project) Top Ten Project

Experience with ISO 27001 / 27002 and NIST Cybersecurity Framework

Experience in identifying potential attacks and threat vectors and offer mitigation

Experience with vulnerability management tools like Blackduck Trivy Prisma cloud Tenable etc.

Proficient in Security assessments Authentication and access control

Understanding of penetration testing Applied cryptography and security protocols preferable

Experience with AppSec practices for Infrastructure connected devices etc.

Good understanding of cryptographic primitives and their underlying principles preferable

Good understanding of networking protocols such as TCP / IP and UDP.

Good understanding of Content Delivery Networks and their integration into applications

Active in the security community. Regularly attends meetups or conferences

Working understanding of Agile Development processes

Lead without authority in a matrix organization

Excellent communication skills verbal and written

Ability to translate complex ideas into simple solutions to implement

Key Skills

Continuous Integration,SQL,.NET,Debugging,C / C++,Go,Root cause Analysis,ASP.NET,C#,Application Development,JavaScript,Teradata

Employment Type : Full Time

Experience : years

Vacancy : 1