InfoSec Specialist - AS

Overview

Playing an SME role to support business application teams with security scanning, automation and remediation guidance.

What you'll do

• Play an SME role to assist business application teams with scanning and provide basic remediation guidance.
• Follow process and guide business teams through SAST and DAST on licensed tools.
• Attend meetings with internal stakeholders and provide support.
• Provide tool scan configuration assistance and support to application teams.
• Perform vulnerability assessment of reported issues.
• Provide remediation consultation to business application teams.
• Give basic guidance to application developers on remediation of open findings.
• Coordinate with development leads and management team as a senior member.

What you'll need

• Minimum 6-8 yrs of experience.
• Well versed with OWASP Top 10 vulnerabilities identification and remediation.
• SAST (Static analysis security testing) assessment experience.
• DAST (Dynamic analysis security testing) assessment experience.
• Tool exposure: Fortify Workbench, Veracode, Snyk, Sonarqube, Burp suite, Invicti, etc.
• Good communication and writing skills to work with global team members.
• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

Nice to have

• Programming background or Python knowledge.
• Python scripting.
• Experience in banking domain.
• Experience in SOC Operations (in application security).

Details

• Location: Pune, India.
• Corporate title: Associate.