Application Security Engineer @Big4 Mumbai

Your work profile

• Source Code Review (SCR). Annually and Adhoc as per requirement.
• Maintenance and management SCR tool and manage the user creation/deletion/dormant user removal.
• Application Security (Web/Mobile). Conduct application security (Appsec) assessment for all in-scope internal and external web, android and iOS applications once annually or when the change in modules/UI has been made (whichever applicable first).
• Maintenance and management Appsec tools and manage the user creation/deletion/dormant user removal.
• Follow up with OEM in case of hardware failure, firmware upgrade, raised ticket, and ensure OEM SLA is met.

Key skills required

• 3-8 years of experience.
• Conduct Appsec on Production Environment.
• Provide external closure report (in PDF) with findings, impact, recommendations and POCs.
• Assist & Support team for closing the vulnerability (if any)
• External Assessment (Onsite & Offsite) quarterly, monthly rescan should be performed.
• Assessment should be performed based on security standards such as OWASP Top 10, NIST.
• Detailed Management level MIS and Dashboard creation to be captured on fortnight basis.
• Master's or Bachelors degree in Cybersecurity, Information Technology, or related field.
• Location: MumbaiRole & responsibilities

Preferred candidate profile

Perks and benefits