Cyber Security Specialist - Application Security
Posted Updated
Description
Department: D & AI (H)
Location: Electronic City
Education Qualification: Bachelor's or Master's degree
Responsibilities
- Collaborate with development teams to identify and address security gaps early in SDLC.
- Review the architecture and conduct threat modelling to identify threats and risks.
- Prioritize and guide remediation efforts for mitigating the identified risks.
- Promote secure coding practices through collaboration & developer training.
- Implement automated security testing in CI/CD pipelines.
- Perform security assessment of the applications or the features being developed.
- Support teams in resolving vulnerabilities found during security assessment.
- Partner with DevOps and infrastructure teams to ensure secure application delivery.
- Constantly improve the application security posture from both tech and process perspectives.
- Conduct regular security audits and assessments to ensure that Applications/APIs are secure.
- Respond to security incidents and provide technical support as required.
- Assist and respond to internal/external audits and ensure compliance with security standards.
- Stay up to date with the latest security trends and technologies.
- Monitor emerging AI-related threats, risks, and assess their impact on application security.
Required Skills
- Security principles across the Software Development Lifecycle (SDLC), with the ability to embed security from design to deployment.
- Threat modeling methodologies (STRIDE, DREAD, PASTA)
- Manual and automated code reviews for secure coding compliance
- SAST, SCA tools and triaging issues
- Testing Web Applications and Mobile Applications to identify security loopholes
- API security and testing common vulnerabilities
- Cloud Security (AWS, Azure)
- OWASP Top 10, CWE and mitigation strategies
- AI/ML security risks and mitigation strategies
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.