4 days ago
Bengaluru, IndiaSenior
Responsibilities
- Conduct secure code reviews and identify context-specific application vulnerabilities.
- Translate security policies into actionable, non-functional application security controls.
- Communicate application security weaknesses, exploit patterns, and risk scenarios to technical and non-technical audiences.
- Assist development teams with vulnerability mitigation and remediation within delivery environments.
- Drive alignment with security objectives and improve secure-development processes.
- Partner cross-functionally with developers, product owners, and other stakeholders.
- Apply application-layer security controls, secure cryptographic practices, and secure coding principles.
- Use application security tools including SAST, DAST, IDE plugins, decompilers, and threat-modeling platforms.
Requirements
- Bachelor’s degree in computer engineering or a related engineering degree, or practical experience.
- At least 5 years of experience; the posting also specifies 7+ years of hands-on programming and IT experience for Java or .NET web and service development.
- Knowledge of OWASP Top 10 and CWE Top 25.
- Knowledge of authentication, authorization, input/output validation and sanitization, injection defenses, encryption, hashing, and data protection.
- Secure coding experience in Java or .NET web and service development.
- Experience with the Secure Development Lifecycle and application security code review.
- Experience with enterprise platforms such as Struts, Spring, J2EE/Jakarta EE, or .NET.
- Understanding of XML, JSON, AJAX, JavaScript-driven user interfaces, SOAP, and REST security considerations.
- Experience with source-code repository tools such as BitBucket and GitHub.
- Strong analytical, problem-solving, communication, relationship-building, and remediation facilitation skills.
- Preferred: a master’s degree in Cybersecurity.
- Preferred: web application penetration testing, ethical hacking, red/blue teaming, or capture-the-flag experience.
Benefits
- The posting describes a role at Wipro, a global technology services and consulting company operating across 65 countries.
- The position works with cross-functional teams in an agile delivery environment.
Tech Stack
Categories
About Wipro
Wipro is a global IT services and consulting firm that provides application development, cloud migration, infrastructure management, data/AI, and business process outsourcing for enterprises. It earns revenue through long-term outsourcing, managed services, and project-based consulting across multiple industries. Founded in 1945 and headquartered in Bangalore, India, Wipro is publicly traded (NYSE: WIT; NSE/BSE: WIPRO).