Application Security Engineer / DevSecOps Security Engineer

Our client is a trusted global innovator of IT and business services. They help clients transform through consulting, industry solutions, business process services, digital & IT modernization and managed services. Our client enables them, as well as society, to move confidently into the digital future. We are committed to our clients long-term success and combine global reach with local client attention to serve them in over 50 countries around the globe.

Job Title: Application Security Engineer / DevSecOps Security Engineer

Location: Bangalore

Experience: 6+ yrs

Job Type : Contract to hire.

Notice Period:- Immediate joiners.

Mandatory Skills:

Good knowledge on Source code review

Working exp. in Fortify tool

Exp. in CICD tool, preferably in Azure dev-ops, Gitlab and Jenkins

Exp. in Fortify tool installation and configuration

Expert in Static Application Security ScanAnalysis source code review SAST Software Composition Analysis SCA Dynamic Application Security ScanAnalysis DAST

Good knowledge of Application Threat Modeling

Implemented DevSecOps Secure CICD integration

Experience of building Security Gates threshold levels for build passfail

Troubleshooting and Configuration of DevSecOps pipeline

Demonstrated experience leading Security Design Reviews andor Architecture Risk Analysis

Expertise in OWASP Good knowledge of NIST SANS PCI ISO 27001

Proficient with manual and automated scanner approaches

Sound Knowledge of DevOps environment

Preparing security advisories and defining the severity levels for the vulnerabilities

Expert in code review false positive analysis

Preparing monthly security reports for the management

Expert in Scanning validation and reporting of vulnerabilities on daily and monthly basis

Technologies Tools

Security Tools Fortify Fortify AWB Fortify SSC Checkmarx Open Source Tools Visual Studio Eclipse Azure DevOps Jenkins etc

Experienced good knowledge of Devop Tools technologies like Jenkins Ansible Chef Docker GitHubKubernetesRedHatOpen Shift Containers Bug tracking tools ticketing system etc