SSDLC Sr. Engineer For RBIT
Posted Updated 1
view
Summary
Senior Secure-SDLC engineer on a 5-year fixed-term contract, placed with client ReBIT in Mumbai. Day-to-day work: security reviews, SAST/DAST/SCA assessments, microservices API security reviews, tech stack reviews, and vulnerability tracking, aligned to OWASP and NIST guidelines.
Dear Candidate,
Greetings from Honeybee Tech Solutions!
We have an exciting opportunity for the role of SSDLC Sr. Engineer with one of our prestigious clients, ReBIT.
- Strong experience in Secure SDLC methodologies (Waterfall Agile)
- Knowledge of OWASP and NIST security guidelines
- Experience in Microservices API Security reviews
- Hands-on experience with:
- SAST (Source Code Analysis)
- DAST (Dynamic Application Security Testing)
- SCA (Software Composition Analysis)
- Tech Stack Review
- Exposure to Cloud platforms / VMware
- Ability to identify vulnerabilities and threat actors across application lifecycle
- Knowledge of Threat Modeling (PASTA, STRIDE) (Good to have)
- Strong analytical and problem-solving skills
- Excellent communication and stakeholder management
- Ability to work in Agile environments
- High integrity and ability to handle confidential information
- Ability to prioritize tasks in a fast-paced environment
- Perform security reviews aligned with best practices
- Conduct SCA, SAST, and DAST assessments and report findings
- Perform tech stack reviews with recommendations
- Identify and eliminate false positives in security tools
- Report and track vulnerabilities with development teams
- Support RFP processes and implementation of SSDLC tools
- Escalate risks and ensure timely resolution
- Provide regular status updates to stakeholders
- Csslp / cissp / SSCP or equivalent
- OWASP certifications, Agile certifications, or API Security specialization (Plus)
- Full-time Fixed-Term Contract (5 years)
- Extendable based on mutual consent
- Exclusive to ReBIT
