Description

You will secure application lifecycles through testing, automation, and architectural reviews in a cloud-native DevOps environment.

Responsibilities

• Conduct vulnerability assessments, penetration testing, and source code reviews across Web, iOS, Android, and cloud platforms.
• Automate security tasks within CI/CD pipelines using APIs and DevSecOps tools.
• Perform SAST and DAST to identify flaws in APIs, middleware, and frontends.
• Execute attack simulations to exploit security vulnerabilities.
• Design security architecture and blueprints focusing on data protection, authentication, and network security.
• Maintain secure coding guidelines and collaborate with product teams to implement remediations.

Required Skills

• 5+ years of experience in application security.
• Hands-on expertise with SAS (Static Application Security) and DAS (Dynamic Application Security) tools.
• Deep understanding of OWASP Top 10 and secure coding principles.
• Proficiency in identifying vulnerabilities within Java, Python, and Node.js environments.
• Experience with penetration testing and source code review.
• Knowledge of CI/CD security automation and cloud-native security practices.
• Familiarity with SDLC enhancement and incident response frameworks.
• Degree in B.E., B.Tech, M.Tech (Dual), M.Tech, or M.E.

Key Skills

Education

Any Graduate