Senior Engineer - Application Security SSDLC

<table class="MsoTableGrid" border="1" cellspacing="0" cellpadding="0" style="border:none;"> <tbody><tr> <td width="601" colspan="2" valign="top" style="width:450.8pt;border:solid 1pt;padding:0cm 5.4pt 0cm 5.4pt;"> <p class="MsoNormal" style="line-height:normal;"><b><span style="font-size:24pt;font-family:inherit, serif;">SSDLC Sr. Engineer</span></b></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-size:12pt;font-family:Roboto;">Vertical</span></b></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-size:10pt;font-family:Roboto;color:#2A333E;">Cyber Security</span></b><b></b></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-size:12pt;font-family:Roboto;">Employee</span></b><span style="font-size:12pt;font-family:Roboto;"> <b>Type</b></span></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span style="font-size:10pt;font-family:Roboto;color:#2A333E;">Employee</span></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-size:12pt;font-family:Roboto;">Experience range (Years</span></b><span style="font-size:12pt;font-family:Roboto;">)</span></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span style="font-size:10pt;font-family:Roboto;color:#2A333E;">3 years - 5 years</span></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-family:Roboto;">Reporting Structure</span></b><b></b></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span style="font-family:Roboto;">Reports to the Platform Software Security Services – Lead/ Manager</span></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-family:Roboto;">Education</span></b></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span style="font-family:Roboto;">Bachelor’s Degree in Engineering/Master Degree in Engineering in CSE/CS/IT/IT Security or Cyber Security Specialization/B.Sc/M.Sc/MCA (IT/Computer) preferred</span></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-family:Roboto;">Experience/ Qualifications</span></b></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoListParagraphCxSpFirst" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">1.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Experience in the following process areas:</span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Secure SDLC Methodologies for Waterfall/ Agile software development </span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Should be well-versed with Security best practices like OWASP and NIST guidelines </span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Ability to perform security review of microservices architecture, API Security </span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Hands on experience on Source Code reviews - SAST solution </span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Hands on experience on Dynamic Application Security Testing - DAST</span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Hands on experience in Software Composition Analysis - SCA </span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Hands on experience in performing Tech Stack Review </span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Comfortable working in an environment that practices Agile development, engaging Product Owner and other stakeholders</span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Good knowledge of Cloud platform/VMware</span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Ability to identify vulnerabilities & threat actors in the application cycle and communicate effectively to the stake holders.</span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-top:0cm;margin-right:0cm;margin-bottom:0cm;margin-left:39.25pt;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">•<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Threat Modelling – PASTA, STRIDE etc (Good to Have)</span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">2.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Possesses ability to quickly understand the technical and functional aspects of the project to be able to communicate effectively with different stakeholders. </span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">3.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Excellent written and verbal communication skills in English, high integrity, strong work ethic and ability to empathize with the customer.</span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">4.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Ability to work effectively in a fast-paced, project-oriented environment</span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">5.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Ability to prioritize and execute tasks</span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">6.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Ability to handle sensitive and confidential information</span></p> <p class="MsoListParagraphCxSpLast" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">7.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Strong analytical and problem-solving skills</span></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-family:Roboto;">Responsibilities</span></b></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoListParagraphCxSpFirst" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">1.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Perform security best practices review followed by Development team</span></p> <p class="MsoListParagraphCxSpMiddle" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">2.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Perform SCA and report vulnerabilities and recommendations</span></p> <p class="MsoListParagraphCxSpLast" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">3.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Perform Tech Stack review and report findings along with recommendations. </span></p> <ol start="4" type="1"> <li class="MsoNormal" style="line-height:normal;vertical-align:baseline;"><span style="font-family:Roboto;">Perform code review (supporting SAST Tool) and remove false positives if any, and report valid security issues to development team</span></li> <li class="MsoNormal" style="line-height:normal;vertical-align:baseline;"><span style="font-family:Roboto;">Perform DAST on the various applications and remove false positives if any, and report valid security issues to development team</span></li> <li class="MsoNormal" style="line-height:normal;vertical-align:baseline;"><span style="font-family:Roboto;">Contribution to RFP process and assist in Implementing SSDLC Tools.</span></li> </ol> <p class="MsoListParagraphCxSpFirst" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">7.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Escalate issues and risks and proactively takes ownership for resolution</span></p> <p class="MsoListParagraphCxSpLast" style="margin-bottom:0cm;text-indent:-18pt;line-height:normal;"><span style="font-family:Roboto;">8.<span style="font-size:7pt;line-height:normal;font-family:'Times New Roman';"> </span></span><span style="font-family:Roboto;">Track milestones and deliverables and provide regular status reporting to respective stakeholders</span></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-family:Roboto;">Certifications</span></b></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span style="font-family:Roboto;">CSSLP/CISSP/SSCP or equivalent certification are desirable (Good to Have).</span></p> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span style="font-family:Roboto;">Application/API Security Threat Modelling/API Security product Implementations, Specialization or OWASP certifications or Agile Certifications are a plus </span></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-family:Roboto;">Employment Type</span></b></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span style="font-family:Roboto;">All positions are on fixed term contract on a full-time basis exclusively for ReBIT, initially for a period of five years, extendable by mutual consent</span></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-family:Roboto;">Location</span></b></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span style="font-family:Roboto;">Navi Mumbai <span style="background:#FFFF00;">(Mandatory)</span></span></p> </td> </tr> <tr> <td width="189" valign="top" style="width:141.5pt;border-right:1pt solid;border-bottom:1pt solid;border-left:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><b><span style="font-family:Roboto;">Joining</span></b></p> </td> <td width="412" valign="top" style="width:309.3pt;border-bottom:1pt solid;border-right:1pt solid;padding:0cm 5.4pt;"> <p class="MsoNormal" style="margin-bottom:0cm;line-height:normal;"><span style="font-family:Roboto;">Immediate Joiners preferred. </span></p> </td> </tr> </tbody></table> <p class="MsoNormal"> </p>