Sr. Application Security Risk Analyst

3 months ago

New Delhi, India Qlotech Full time

ob Title: Sr. Application Security Risk AnalystDepartment: Information Security and ComplianceJob Types: Full-time, PermanentLocation: India

Key Responsibilities: Work with various senior IT leaders and application development areas to develop and implement S-SDLC Program according to the organizations unique information security risk management, governance, risk, and compliance processes;

Provides oversight / governance of the S-SDLC Program and communicates progress and issues to the CISO, Senior Business / IT Leadership and Application Development teams;

Serves as a consultant to disseminate specialist application security knowledge to the development communities;

Researches and evaluates solutions and recommends the most efficient and cost effective solutions for ensuring that security is built-in to all phases of the S-SDLC;

Research and assess latest BlockChain security vulnerabilities and events

Leads demonstrations of application security tools to business and application development teams;

Responsible to integrate & manage feeds from application security tools, vulnerability scans & penetration testing tools into organizations GRC platform;

Responsible for the implementation and maintenance of Static, Dynamic, Interactive, and API application security testing tools (such as Veracode, Checkmarx, Synopsys, and Netsparker), scanning policies, user provisioning and security strategy documents, and any other related documentation;

Initiates and develops innovative concepts to solve complex challenges in the Code Analysis Tools environment with little or no precedent; creates new opportunities to enable the use of new solutions. Provides conceptual guidance to other senior and high-level technical experts;

Engages Veracode, Checkmarx, Synopsys, and Netsparker and/or other third-party suppliers of application security software on system defects, support issues;

Lead and manage organizations bug bounty program;

Stay knowledgeable of current advances in all areas of information technology concerning vulnerabilities, security breaches or malicious attacks; Identify vulnerabilities or weaknesses in systems;

Develop an externally-focused view of the evolving threats facing organization;

Report to management on IT system vulnerability and protection against malware and hackers;

Examine systems and procedures to identify potential adverse events, including but not limited to hardware and software crashes, physical disasters, malicious intruders, malware, denial of service attacks and employee misconduct;

Evaluate security policy, processes and procedures for completeness;

Assist in identifying breaches in organizations security or tracking the source of an unauthorized intrusion;

Monitor and advise on information security issues related to the systems to ensure the security controls are appropriate and operating as intended; Ensure that controls are adequate to protect sensitive information systems;

Develop and maintain security operating procedures and associated documentation;

Identify inefficiencies and make suggestions for process improvements;

Develop and implement process for regular user recertification;

Validate the removal process for application access for terminated employees;

Perform semi-annual user access and entitlement reviews across the organization;

Perform quarterly reviews and recertifications of privileged accounts;

Identify and document the various functions and processes within each application;

Develop and maintain SOD matrices for each application used within the organization along with identification of toxic combinations;

Identify any conflicting duties based on the SOD Matrix and toxic combinations and perform remediation;

Develop roles and access profiles based on the SOD in collaboration with the business users;

Identify and document list of users and mapping to various functions and processes;

Assist with internal/external audits and regulatory examinations (such as SOC, IAA (IT General Control Audits), DFS etc.) as they relate to Identity Access Management and Application Security controls and remediation of issues discovered during the control testings;

Track open audit issues to closure and reporting on status completion and progress;

Review access controls processes to identify vulnerabilities and the appropriate solutions to eliminate or minimize their potential effects;


Skills and Experience: Minimum 7-8 years of experience in application architecture and design reviews

Minimum 7-8 years of experience in application security assessment/testing experience (white box, black box, code review and forensic testing)

Knowledge of application security processes and standards including OWASP (ASVS etc.), CVSS rating, factors impacting risk rating etc.

Experience in threat modelling and application risk analysis

Experience in application privacy impact analysis

Experience in performing application decomposition and analysing security issues

Strong knowledge of designing, deploying, and maintaining security architecture in critical business applications

Experience in performing evaluation and assessment of SDLC processes and security controls

Experience in evaluating app sec processes to identify improvements and envision/develop automation within CI/CD pipelines

Experience in developing Security testing scripts and procedures

Hands on experience with Static, Dynamic, Interactive, and API application security testing tools such as Veracode, IBM AppScan, Fortify, Web Inspect, Checkmarx, Synopsys, and Netsparker

Experience in testing and assessing security of mobile applications

Experience with web services (API) architecture, security reviews and testing.

Experience in integrating application security tools and processes in CI/CD pipelines

Coding experience with at least .NET, J2E, Python, C++ etc.

Knowledge of cryptographic tools and security APIs

Knowledge of micro service architecture

Knowledge of BlockChain, Smart Contracts, DApps etc.

Solid understanding of networking concepts

Solid understanding of operating system security concepts

Solid understanding of Encryption, Certificate & Key Management Services (CM, KMS, HSM etc.)

Understanding of malware, emerging threats, attacks, and vulnerability management

Experience assisting the development and maintenance of tools, procedure, and documentation



Personal Requirements :Required Certifications Required: CPT, CEH

Certifications Optional: CISSP, AWS Certified Solutions Architect, AWS Certified Security Specialist, Google Cloud Architect, Google Cloud Security Engineer, CCSP (Certified Cloud Security Professional)


  • Sr. Application Security Risk Consultant

    2 weeks ago

    Delhi, Delhi, India Qlotech Full time

    Job SummaryWe are seeking a highly skilled Sr. Application Security Risk Analyst to join our team at Qlotech. The successful candidate will be responsible for developing and implementing effective application security risk management strategies, ensuring the confidentiality, integrity, and availability of our applications.Main Responsibilities:Collaborate...

  • Application Security Manager

    5 days ago

    new delhi, India TAC Security Full time

    We are looking for a skilled Application Security Manager to lead our application security initiatives. In this role, you will be responsible for implementing security measures across the software development lifecycle and ensuring that our applications are resilient against threats.Key Responsibilities:Team Leadership: Lead and mentor the application...

  • Application security manager

    4 days ago

    New Delhi, India TAC Security Full time

    We are looking for a skilled Application Security Manager to lead our application security initiatives. In this role, you will be responsible for implementing security measures across the software development lifecycle and ensuring that our applications are resilient against threats.Key Responsibilities:Team Leadership: Lead and mentor the application...

  • Application Security Manager

    6 days ago

    New Delhi, India TAC Security Full time

    We are looking for a skilled Application Security Manager to lead our application security initiatives. In this role, you will be responsible for implementing security measures across the software development lifecycle and ensuring that our applications are resilient against threats. Key Responsibilities:Team Leadership: Lead and mentor the application...

  • Application Security Manager

    5 days ago

    New Delhi, India TAC Security Full time

    We are looking for a skilled Application Security Manager to lead our application security initiatives. In this role, you will be responsible for implementing security measures across the software development lifecycle and ensuring that our applications are resilient against threats.   Key Responsibilities: Team Leadership: Lead and mentor the...

  • Application Security Manager

    6 days ago

    New Delhi, India TAC Security Full time

    We are looking for a skilled Application Security Manager to lead our application security initiatives. In this role, you will be responsible for implementing security measures across the software development lifecycle and ensuring that our applications are resilient against threats. Key Responsibilities:Team Leadership: Lead and mentor the application...

  • Application Security Manager

    5 days ago

    new delhi, India TAC Security Full time

    We are looking for a skilled Application Security Manager to lead our application security initiatives. In this role, you will be responsible for implementing security measures across the software development lifecycle and ensuring that our applications are resilient against threats. Key Responsibilities:Team Leadership: Lead and mentor the application...

  • Information Security Analyst

    4 weeks ago

    Delhi, India TAC Security Full time

    Job Title: Information Security AnalystLocation: Lower Parel, Mumbai (On-site)Job Description:We are seeking a skilled Information Security Analyst to join our team in Lower Parel, Mumbai. In this role, you will play a critical part in monitoring and enhancing our cybersecurity posture.Key Responsibilities:Monitor security alerts and events using SIEM tools...

  • Application Security Manager

    3 weeks ago

    Delhi, Delhi, India TAC Security Full time

    Job Title: Application Security ManagerLocation: Delhi, IndiaCompany Description:TAC Security is a global leader in vulnerability management, specializing in protecting Fortune 500 companies and governments worldwide. Our AI-based Vulnerability Management Platform, ESOF, manages over 5 million vulnerabilities. Recognized as Gartner's Customer First Choice...

  • IT Risk and Security Sr. Analyst

    5 months ago

    New Delhi, India Goodyear Full time

    Location: IN - New Delhi Goodyear Talent Acquisition Representative: Maria Monica Canding Sponsorship Available: No Relocation Assistance Available: No  This will focus on product support and expansion of the global privileged access solutions at Goodyear and will directly report to the Sr. IT Section Leader of Privileged access within Global IT Risk...

  • IT Risk and Security Sr. Analyst

    5 months ago

    New Delhi, India Goodyear Full time

    Location: IN - New Delhi    Goodyear Talent Acquisition Representative: Maria Monica Canding   Sponsorship Available:  NoRelocation Assistance Available: No    This will focus on product support and expansion of the global privileged access solutions at Goodyear and will directly report to the Sr. IT Section Leader of Privileged access...

  • TAC Security

    3 weeks ago

    Delhi, India TAC Security Full time

    Job Title : Application Security Manager. Location : Aerocity, Delhi. Company Description : TAC Security is a global leader in vulnerability management, specializing in protecting Fortune 500 companies, leading enterprises, and governments worldwide. Our AI-based Vulnerability Management Platform, ESOF (Enterprise Security in One Framework), manages over 5...

  • Senior Application Security Analyst

    2 months ago

    Delhi, India ETS Full time

    Position Summary:We are looking for a seasoned Application Security Lead Analyst to join our team. As an Application Security Analyst, you will work as a consultant to our product development staff, ensuring the security of our applications throughout their lifecycle. Your role will be to identify potential vulnerabilities, suggest mitigation strategies, and...

  • Cyber Security Analyst

    2 months ago

    delhi, India TAC Security Full time

    Company DescriptionTAC Security is a global leader in vulnerability management that specializes in protecting Fortune 500 companies, leading enterprises, and governments worldwide. With its AI-based Vulnerability Management Platform ESOF (Enterprise Security in One Framework), TAC Security manages over 5 million vulnerabilities. ESOF, recognized as Gartner's...

  • Cyber Security Analyst

    1 month ago

    Delhi, India TAC Security Full time

    Company Description TAC Security is a global leader in vulnerability management that specializes in protecting Fortune 500 companies, leading enterprises, and governments worldwide. With its AI-based Vulnerability Management Platform ESOF (Enterprise Security in One Framework), TAC Security manages over 5 million vulnerabilities. ESOF, recognized as...

  • TAC Security

    3 weeks ago

    Delhi Division, India TAC Security Full time

    Job Title : Application Security Manager. Location : Aerocity, Delhi. Company Description : TAC Security is a global leader in vulnerability management, specializing in protecting Fortune 500 companies, leading enterprises, and governments worldwide. Our AI-based Vulnerability Management Platform, ESOF (Enterprise Security in One Framework), manages over 5...

  • Cyber Security Analyst

    2 months ago

    delhi, India TAC Security Full time

    Company Description TAC Security is a global leader in vulnerability management that specializes in protecting Fortune 500 companies, leading enterprises, and governments worldwide. With its AI-based Vulnerability Management Platform ESOF (Enterprise Security in One Framework), TAC Security manages over 5 million vulnerabilities. ESOF, recognized as...

  • Cyber Security Analyst

    2 months ago

    Delhi, India TAC Security Full time

    Company DescriptionTAC Security is a global leader in vulnerability management that specializes in protecting Fortune 500 companies, leading enterprises, and governments worldwide. With its AI-based Vulnerability Management Platform ESOF (Enterprise Security in One Framework), TAC Security manages over 5 million vulnerabilities. ESOF, recognized as Gartner's...

  • Cyber Security Risk Analyst

    7 days ago

    Mumbai/Bangalore/Delhi, India Corpjob Placement Services Full time

    Cyber Security Risk AnalystAs a Cyber Security Risk Analyst at Corpjob Placement Services, you will be responsible for assisting the functional manager in performing day-to-day security activities/operations. This includes analyzing problem statements, collaborating to define solutions, and executing them in accordance with defined processes and frameworks....

  • Senior Security Engineer

    6 days ago

    new delhi, India TAC Security Full time

    Company DescriptionTAC Security is a global leader in vulnerability management that specializes in protecting Fortune 500 companies, leading enterprises, and governments worldwide. With its AI-based Vulnerability Management Platform ESOF (Enterprise Security in One Framework), TAC Security manages over 5 million vulnerabilities. ESOF, recognized as Gartner's...