Lead - Application Security SSDLC

<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="614" style="width:460.45pt;background-size:initial;"> <tbody><tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border:solid #000000 1pt;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Reporting Structure</span></b><span lang="en-us" style="font-size:10.5pt;font-family:Arial, sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-us"></span></p><p></p> </td> <td width="463" style="width:347.2pt;border:solid #000000 1pt;border-left:none;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Reports to Senior Manager – SSDLC</span></p><p></p> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border:solid #000000 1pt;border-top:none;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Education</span></b><span lang="en-us" style="font-size:10.5pt;font-family:Arial, sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-us"></span></p><p></p> </td> <td width="463" style="width:347.2pt;border-top:none;border-left:none;border-bottom:solid #000000 1pt;border-right:solid #000000 1pt;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">University degree in the field of computer science or IT.</span></p><p></p> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border:solid #000000 1pt;border-top:none;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Experience/ Qualifications</span></b><span lang="en-us" style="font-size:10.5pt;font-family:Arial, sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-us"></span></p><p></p> </td> <td width="463" style="width:347.2pt;border-top:none;border-left:none;border-bottom:solid #000000 1pt;border-right:solid #000000 1pt;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoListParagraphCxSpFirst" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">6+ years of Information Security background is essential.</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">4+ years of Software Development Lifecycle, Security reviews in project lifecycle</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Experience in evaluating the control environment through Architecture, Software Design reviews and or not limited to Threat Modelling.</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Security reviews of design flaws</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Hands on experience in Static Application Security Testing and Dynamic Application Security Testing.</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Experience in standardizing application security tools and methodology</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Should be familiar with the best practices of OWASP, SANS Institute, ISACA, GAO, FISCAM, NSA, NIST, Internet Engineering Task Force (IETF)</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Develop a detailed security framework to be followed by developers in every steps of software development lifecycle.</span></p><p></p> <p class="MsoListParagraphCxSpLast" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Experience in software/application analysis tools like SAST, DAST, SCA, IAST, RASP, threat modelling, etc.</span></p><p></p> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border:solid #000000 1pt;border-top:none;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Industry</span></b><span lang="en-us" style="font-size:10.5pt;font-family:Arial, sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-us"></span></p><p></p> </td> <td width="463" style="width:347.2pt;border-top:none;border-left:none;border-bottom:solid #000000 1pt;border-right:solid #000000 1pt;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Information technology</span></p><p></p> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border:solid #000000 1pt;border-top:none;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Responsibilities</span></b><span lang="en-us" style="font-size:10.5pt;font-family:Arial, sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-us"></span></p><p></p> </td> <td width="463" valign="top" style="width:347.2pt;border-top:none;border-left:none;border-bottom:solid #000000 1pt;border-right:solid #000000 1pt;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoListParagraphCxSpFirst" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Conduct internal / third-party Security (SSDLC) Risk Assessments on business-critical assets and processes.</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Coordinate with project teams for ensuring security framework to enforced in all phases of SSDLC</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Prepare security effectiveness reports for management.</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:3.75pt;margin-right:0cm;margin-bottom:3.75pt;margin-left:36pt;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Testing the applications / systems for SSDLC framework to RBI / ReBIT Information Security practices</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:3.75pt;margin-right:0cm;margin-bottom:3.75pt;margin-left:36pt;text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Ensure new applications are inducted into Data centre after conducting SSDLC assessments</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Follow up on closure of these gaps and escalate when necessary</span></p><p></p> <p class="MsoListParagraphCxSpMiddle" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Define and enhance application security requirements and standards which must be designed for agile development methods leveraging traditional application architectures</span></p><p></p> <p class="MsoListParagraphCxSpLast" style="text-indent:-18pt;line-height:normal;"><span lang="en-gb" style="font-family:Symbol;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Assist DevSecOPs team to create secure predictable CI/CD pipeline processes, and enable application teams to develop new capabilities securely</span></p><p></p> </td> </tr> <tr style="border-left:1px solid #000000;height:21.2pt;"> <td width="151" style="width:113.25pt;border:solid #000000 1pt;border-top:none;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <p class="MsoNormal" style="margin-bottom:0cm;text-align:justify;line-height:normal;"><b><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-gb">Certifications (any two)</span></b><span lang="en-us" style="font-size:10.5pt;font-family:Arial, sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-us"></span></p><p></p> </td> <td width="463" valign="top" style="width:347.2pt;border-top:none;border-left:none;border-bottom:solid #000000 1pt;border-right:solid #000000 1pt;padding:0cm 5.25pt 0cm 5.25pt;height:21.2pt;"> <ul type="disc"> <li class="MsoNormal" style="color:#212529;line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">CISSP</span><span lang="en-us" style="font-size:10.5pt;font-family:Arial, sans-serif;letter-spacing:0.6pt;" xml:lang="en-us"></span><p></p></li> <li class="MsoNormal" style="color:#212529;line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">CSSLP</span><span lang="en-us" style="font-size:10.5pt;font-family:Arial, sans-serif;letter-spacing:0.6pt;" xml:lang="en-us"></span><p></p></li> <li class="MsoNormal" style="color:#212529;line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Certificates related to cloud security</span><p></p></li> <li class="MsoNormal" style="color:#212529;line-height:normal;"><span lang="en-gb" style="font-family:'Lucida Sans', sans-serif;letter-spacing:0.6pt;" xml:lang="en-gb">Certificates related to DevSecOps automation</span><span lang="en-us" style="font-size:10.5pt;font-family:Arial, sans-serif;letter-spacing:0.6pt;" xml:lang="en-us"></span><p></p></li> </ul> </td> </tr> </tbody></table><p> </p><p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;background-size:initial;"><span lang="en-us" style="font-size:10.5pt;font-family:Arial, sans-serif;color:#212529;letter-spacing:0.6pt;" xml:lang="en-us"> </span></p>