This job offer is not available in your country.
InfoSec L2 VM (App) Analyst
ConfidentialHyderabad / Secunderabad, Telangana30+ days ago
Job descriptionThe Analyst will work closely with the Vulnerability Management Application Security Engineer and the onshore vulnerability management team to execute security testing initiatives. Application Development teams to address vulnerabilities and implement secure coding practices. Cloud and Application Security teams to align on strategy and processes. Other stakeholders within the Zoetis Tech & Digital (ZTD) organization to support vulnerability remediation efforts. University Degree in Computer Science or Information Systems is required MS or advanced identity courses or other applicable certifications is desirable, including : Relevant certifications in infrastructure security and vulnerability management, such as Offensive Security Certified Professional (OSCP), GIAC Certified Vulnerability Assessor (GCVA), or Certified Ethical Hacker (CEH), are highly preferred A minimum of 4+ years of relevant experience with a strong background in vulnerability management and security engineering 2+ years of experience in the pharmaceutical or other regulated industry, especially Animal Health Experience working with global teams across multiple time zones Demonstrated ability to work within diverse technical teams Hands-on experience in application security assessments, penetration testing, or secure development practices Proficiency with application security and vulnerability scanning tools, such as Burp Suite, Veracode, and HCL AppScan Knowledge of web application, mobile app, and API penetration testing methodologies Familiarity with the Software Development Lifecycle (SDLC), secure coding practices, and application development processes Understanding of application security vulnerabilities (e.g., OWASP Top 10), security frameworks (e.g., NIST), and risk mitigation strategies Experience working with cloud platforms such as AWS and Azure is desirable Strong analytical skills and a detail-oriented approach to identifying and addressing vulnerabilities Excellent verbal and written communication skills to create reports and collaborate with internal teams Must be fluent in both written and spoken English, with the ability to communicate effectively across technical and non-technical audiences Full Time
POSITION RESPONSIBILITIES
- Conduct security testing and vulnerability assessments for various applications, including web applications, mobile apps, business systems, and APIs.
- Assist in the identification, analysis, and prioritization of vulnerabilities, ensuring timely and effective remediation in collaboration with development teams.
- Support the development and execution of secure coding practices and application security guidelines.
- Monitor and interpret vulnerability scanning results to identify trends, root causes, and systemic risks, providing actionable insights to stakeholders.
- Collaborate with the wider Vulnerability Management team and other stakeholders to maintain and improve security processes and tools.
- Stay updated on emerging threats, vulnerabilities, and industry best practices to enhance testing methodologies and overall security strategies.
- Create and maintain detailed documentation and reports to track security metrics and demonstrate compliance with applicable standards.
100%
ORGANIZATIONAL RELATIONSHIPS
This role will also collaborate with :
EDUCATION AND EXPERIENCE
Education :
o Certified Information Systems Security Professional (CISSP)
Experience :
TECHNICAL SKILLS REQUIREMENTS
PHYSICAL POSITION REQUIREMENTS
Availability to work between 1pm IST to 10pm IST hours (minimum 3 hours of daily overlap with US ET Time zone)
Skills Required
security engineering, Vulnerability Management
Create a job alert for this search
Analyst • Hyderabad / Secunderabad, Telangana