Lead SSDLC For the RBIT
Summary
Application security lead role at Honeybee Tech Solutions, placed with client ReBIT in Mumbai. Day to day: run SSDLC risk assessments, threat modeling and design reviews, manage SAST/DAST/SCA/IAST/RASP tooling, ensure security frameworks across SDLC phases, and support DevSecOps CI/CD pipelines per RBI/ReBIT standards.
Dear Candidate,
Greetings from Honeybee Tech Solutions!
We have an exciting opportunity for the role of Lead SSDLC with one of our prestigious clients, ReBIT.
- 6+ years of Information Security experience
- 4+ years in Secure Software Development Lifecycle (SSDLC) security reviews
- Experience in:
- Architecture Software Design Reviews
- Threat Modeling
- Identifying security design flaws
- Hands-on experience with:
- SAST, DAST, SCA, IAST, RASP tools
- Experience in standardizing application security tools methodologies
- Strong knowledge of security frameworks and standards:
- Owasp, SANS, isaca, GAO, fiscam, NSA, NIST, IETF
- Ability to define and implement security frameworks across SDLC phases
- Conduct internal and third-party SSDLC risk assessments
- Ensure security framework implementation across all SDLC phases
- Perform application security testing and compliance checks as per RBI/ReBIT standards
- Prepare security effectiveness and risk reports for management
- Ensure secure onboarding of applications into data centers
- Track and ensure closure of identified vulnerabilities
- Define and enhance application security standards for Agile environments
- Support DevSecOps teams in building secure CI/CD pipelines
- Collaborate with project teams and stakeholders for secure delivery
- CISSP
- CSSLP
- Cloud Security Certifications
- DevSecOps / Automation Certifications
- Information Technology