Senior Engineer - Application Security SSDLC

5 months ago

Navi Mumbai, IndiaMid Level / Senior

Responsibilities

Review secure development practices followed by development teams.
Perform software composition analysis and report vulnerabilities and recommendations.
Review technology stacks and report findings with recommendations.
Conduct source code reviews supporting SAST tools, remove false positives, and report valid security issues.
Perform DAST on applications, remove false positives, and report valid security issues.
Contribute to RFP processes and assist with implementing SSDLC tools.
Escalate issues and risks, proactively own their resolution, and track milestones and deliverables.
Provide regular status reporting to stakeholders.

3–5 years of experience in application security or related process areas.
Experience with secure SDLC methodologies, including Waterfall and Agile development.
Knowledge of OWASP and NIST security guidelines and best practices.
Experience reviewing microservices architecture and API security.
Hands-on experience with SAST-supported source code reviews, DAST, SCA, and technology stack reviews.
Knowledge of cloud platforms or VMware.
Ability to identify application vulnerabilities and threat actors and communicate findings to stakeholders.
Threat modeling experience with PASTA or STRIDE is desirable.
Bachelor’s or Master’s degree in Engineering, CSE, CS, IT, IT Security, Cyber Security, or a related B.Sc, M.Sc, or MCA qualification is preferred.
CSSLP, CISSP, SSCP, equivalent, OWASP, application/API security, threat modeling, or Agile certifications are desirable.
Strong written and verbal English communication, analytical, problem-solving, prioritization, and stakeholder-management skills.

Full-time employee position on a fixed-term contract initially lasting five years, extendable by mutual consent.
Work location is Navi Mumbai and is mandatory.
Immediate joiners are preferred.