Application Security Expert

About Mettler Toledo

METTLER TOLEDO is a leading global supplier of precision instruments and services. We are recognized as an innovation leader and our solutions are critical in key R&D, quality control, and manufacturing processes for customers in a wide range of industries including life sciences, food, and chemicals. We operate throughout the world with a culture shaped by innovation and international flair.

Our Opening and Your Responsibilities

* Qualification: B.E / B.Tech / M.E / M.Tech (Computer Science or related fields)

* Experience of at least 10 years in software design and coding

* Experience of at least 5 years in application security or related areas

* Excellent knowledge of OWASP (Open Web Application Security Project) Top Ten & SANS Top 25

* Experience with ISO 27001/27002 and NIST Cybersecurity Framework

* Experience with attacks and mitigation methods

* Experience with Security assessments and penetration testing, Authentication and access control, Applied cryptography and security protocols, automation or frameworks

* Experience with infrastructure automation, continuous integration/deployment related to security

* Experience with Cloud: IaaS and SaaS

* Good understanding of cryptographic primitives and their underlying principles preferable

* Good understanding of networking protocols, such as TCP/IP and UDP

* Good understanding of Software Architectures and their decompositions

* Good understanding of Content Delivery Networks and their integration into applications

* Active in the security community. Regularly attends meetups or conferences

* Working understanding of Agile Development processes

* Experience in security testing, penetration testing, etc. will be an added advantage

* Excellent communication skills - verbal and written. Ability to translate complex ideas into simple solutions on paper

What You Need to Succeed

* Ensure development teams understand the importance of application security principles

* Continuously liaise with various product teams to analyse application vulnerabilities

* Perform customized Threat Analysis, create the reports and work with the team to address issues

* Work with the DevOps/DevSecOps team to integrate the approved App Sec Tools (SAST, SCA etc.)

* Work with stakeholders across the organization to bring in security benchmarks and ensure continuous improvement.

* Monitor vulnerabilities and risks in software platforms, interfaces and applications, provide mitigation relevant for the team

* Support remediation planning & remediation discovered vulnerabilities

* Help the internal team fixing the vulnerabilities

* Mentor development teams on secure coding best practices, industry standards, tools, and processes

* Support the configuration of security tools in the CI/CD pipeline during the development of software systems and applications

* Develop and perform project specific security risk assessments together with local subject matter experts

* Review features design and identify possible flaw in security in the technical design: technologies used (C#, JavaScript (VUE), SQL server, Kubernetes, Docker, Azure DevOps etc.)

Our Offer to You

* Hybrid working model.

* Family Mediclaim benefits including parents & Term life insurance Cover.

* Wide portfolio of training opportunities including but not limited to Conferences, Workshops, Education reimbursement & Online learning.

* A wide range of Career Path to explore based on Individual strengths and aspirations.

* Quarterly and Annual awards for outstanding individuals and Quality of Life Improvement Program

We invite you to be part of our ONE TEAM to make the difference…Precisely

Equal Opportunity Employment

We promote equal opportunity worldwide and value diversity in our teams in terms of business background, area of expertise, gender and ethnicity. For more information on our commitment to Sustainability, Diversity and Equal Opportunity please visit us [1] here.

References

Visible links

1. https://www.mt.com/us/en/home/microsites/sustainability/reporting.html