Lead - Application Security - Telecom

We are on hunt for Lead Application Security for one of our key Telecom clients in Gurgaon

Job role details as below:

- To lead application security assessments and penetration tests of applications using various tools and techniques

- To work along with application development teams to ensure security embedded in each stage of development and rollout of new platforms and changes

- Specifically ensuring the secure architecture, design, development, coding and configuration of new technology projects

- Working knowledge of key security technologies i.e. Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST)

- Working knowledge of executing source code analysers to unearth security vulnerabilities in the source code.

- Run and analyse security Penetration testing and pinpoint security issues and suggest countermeasures for security improvements

- Perform granular infrastructure, infrastructure as code, application and cloud security reviews

- Knowledge of attack vectors from OWASP, SANS, WASC and mitigation of the same.

- Knowledge in various open source security tools such as proxies, fuzzers etc.

- Proven expertise in web technologies (Java/J2EE/Struts/ .NET / PHP / Java Script etc.)

- Strong understanding of HTTP, HTTPS, SSL, TLS, SFTP Protocols

- Define and report to CISO the appropriate metrics to judge operational effectiveness as well as outstanding risk of the organization due to vulnerabilities introduced by projects, e.g. software vulnerabilities and insufficient development practices

- Working with partners and functional teams on application security assessment and vulnerability closure

- To support in IT security audits and certifications and educate team on security best practices

- Contribute to the development of security policies and security standards

- Continuously working on improving the applications security standards without impacting the business