Infosec Engineer IV

Infosec Engineer IV

Location: Bangalore

Experience: 5 - 8 Years

Job Summary

Role description: Application security engineer will be executing automated application Security tools for security weaknesses, performing vulnerability scans, managing security tools and providing security guidance to software development teams.

Responsibilities

• Execute automated SAST and SCA scans to identify security vulnerabilities in web, API, and mobile applications.
• Perform manual secure code reviews to validate findings and detect security issues not identified by automated tools.
• Analyze vulnerability scan results, prioritize risks, and provide remediation recommendations to development teams.
• Collaborate with developers to resolve security issues and promote secure coding best practices.
• Integrate application security testing into the Software Development Life Cycle (SDLC) to ensure security is embedded throughout development.
• Manage application security tools, perform re-validation of fixes, and support continuous improvement of the organization's application security posture.

Key Skills

• Expertise in automating secure coding tools and processes (SAST, SCA, DAST, Mobile & API Security).
• Review security test results from vulnerability scans, penetration testing for true positives and propose appropriate remediation measures or mitigation control.
• Experience with programming languages such as Java, Python, or Go, and at least one scripting language.
• Knowledge on WAF.
• Knowledge of web, mobile, API, Microservices and network pen testing.
• Knowledge of security best practices, principles, and common security frameworks, such as NIST and OWASP, etc.
• Knowledge of current and emerging security technologies, threats and techniques for exploiting security vulnerabilities.
• Knowledge on securing container platforms such as Kubernetes.
• Good written and verbal communication skills.

Education & Experience

• Bachelor's degree in Computer science, Information Technology, Cyber Security, or related discipline or equivalent experience.
• 4 to 6 years of Application Security experience with knowledge on security tools and vulnerabilities.
• Certifications: CSSLP GWAPT CEH CISSP CCSP

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.