Application Security Consultant - Financial Solutions Firm

Application Security Consultant: Large Financial Solutions Company

Application security consultant:

- With a min of 5-6 Yrs relevant experience

- Sound knowledge in AppSec vulnerabilities, remediation & mitigation techniques, and secure coding practices

- Strong understanding of OWASP Testing methodologies

- Prior work experience on application security tools (Web Proxy, and at least one SAST and DAST tool like Checkmarx, Fortify, HP Web Inspect)

- Configure & conduct Static application security (SAST) scans

- Analysis of scan results & vulnerability triage

- Conduct manual code reviews and provide vulnerability analysis - Manual secure code review experience is a must.

- Comprehensive knowledge of at least 2 programming languages - ASP, NET, Java, C# etc.

Work directly with development teams to review findings & provide code level remediation advice

- Good knowledge in CSRF, SSL, DOM based XSS, various injection attacks, would be an added advantage

- Having an acceptable knowledge of cryptographic concepts such as digital signing would be added advantage

- Excellent analytical skills,

- Acceptable level of written and verbal communication skills, considering the candidate would be working with Global teams

There are 3-4 positions open for the role. Most of these positions are Individual Contributor positions as of now, but 1-2 of them can move into the managerial direction in future if the candidate shows such skills.