Application Security Security Architect Globallogic

Job:
- IRC166875- Location:
- India - Noida- Designation:
- Senior Consultant- Experience:
- 10-15 years- Function:
- Engineering- Skills:
- Application Security, Penetration Testing and Reporting, Pentesting, Secure Coding and Code Analysis, Secure development life cycle, Security, Threat modelling**Description**:
Passionate about Secure By Design/Zero Trust Architecture
Implement Secure Development Life Cycle
Secure By Design
Inject Security in every phase of Secure Development Life Cycle
Implement DevSecOps
Experts on terminoloiges like CVSS, CVE, CWE, OWASP, MITRE, SANS 25 and so on
Triage false positive from SAST, DAST and recommend remediations
Should be able to drive things independently - customer calls, pre-sales call on Application Security
Well versed with below and guide Pen/Security Testers

Expertise in Pen Testing of Web Applications

Expertise in pen testing of Web Application, Thick Client and Mobile Apps
Dynamic Scan and Triage false positives of flags from tools

Planning Pen Testing and coverage

VAPT Report Writing

Manual Pen testing using Postman/Extensions and etc

Expertise on Security Tools:
Burp Suite Professional or Enterprise/OWASP ZAP

Kali Linux and tools available in Kali Linux such NMAP, SQLMAP and etc

Preference:
OSCP/CPENT certified
Cloud Security

**Requirements**:

- Passionate about Secure By Design/Zero Trust Architecture
- Implement Secure Development Life Cycle
- Secure By Design
- Inject Security in every phase of Secure Development Life Cycle
- Implement DevSecOps
- Experts on terminoloiges like CVSS, CVE, CWE, OWASP, MITRE, SANS 25 and so on
- Triage false positive from SAST, DAST and recommend remediations
- Should be able to drive things independently - customer calls, pre-sales call on Application Security

Well versed with below and guide Pen/Security Testers
- Expertise in Pen Testing of Web Applications
- Expertise in pen testing of Web Application, Thick Client and Mobile Apps
- Dynamic Scan and Triage false positives of flags from tools
- Planning Pen Testing and coverage
- VAPT Report Writing
- Manual Pen testing using Postman/Extensions and etc
- Expertise on Security Tools:

- Burp Suite Professional or Enterprise/OWASP ZAP
- Kali Linux and tools available in Kali Linux such NMAP, SQLMAP and etc

Preference:

- OSCP/CPENT certified
- Cloud Security

**Preferences**:
BitBucket, Git, JIRA

**Responsibilities**:
Individual Contributor

Passionate about Secure By Design/Zero Trust Architecture
Implement Secure Development Life Cycle
Secure By Design
Inject Security in every phase of Secure Development Life Cycle
Implement DevSecOps
Experts on terminoloiges like CVSS, CVE, CWE, OWASP, MITRE, SANS 25 and so on
Triage false positive from SAST, DAST and recommend remediations
Should be able to drive things independently - customer calls, pre-sales call on Application Security
Well versed with below and guide Pen/Security Testers

Expertise in Pen Testing of Web Applications

Expertise in pen testing of Web Application, Thick Client and Mobile Apps
Dynamic Scan and Triage false positives of flags from tools

Planning Pen Testing and coverage

VAPT Report Writing

Manual Pen testing using Postman/Extensions and etc

Expertise on Security Tools:
Burp Suite Professional or Enterprise/OWASP ZAP

Kali Linux and tools available in Kali Linux such NMAP, SQLMAP and etc

Preference:
OSCP/CPENT certified
Cloud Security

**What We Offer**:
**Exciting Projects**: We focus on industries like High-Tech, communication, media, healthcare, retail and telecom. Our customer list is full of fantastic global brands and leaders who love what we build for them.

**Collaborative Environment**: You Can expand your skills by collaborating with a diverse team of highly talented people in an open, laidback environment — or even abroad in one of our global centers or client facilities

**Work-Life Balance**: GlobalLogic prioritizes work-life balance, which is why we offer flexible work schedules, opportunities to work from home, and paid time off and holidays.

**Professional Development**: Our dedicated Learning & Development team regularly organizes Communication skills training(GL Vantage, Toast Master),Stress Management program, professional certifications, and technical and soft skill trainings.

**Excellent Benefits**: We provide our employees with competitive salaries, family medical insurance, Group Term Life Insurance, Group Personal Accident Insurance, NPS(National Pension Scheme ), Periodic health awareness program, extended maternity leave, annual performance bonuses, and referral bonuses.

**Fun Perks**: We want you to love where you work, which is why we host sports events, cultural activities, offer food on subsidies rates, Corporate parties. Our vibrant offices also include dedicated GL Zones, rooftop decks and GL Club where you can drink coffee or tea with your colleagues over a game of table and offer discounts for popular stores and restaurants

**About GlobalLogic**