Application Security_Mumbai(Airoli)_PWC_F2F Only

Note: Welocity AI Interview must should attend

F2F Interview in Mumbai (Saturday)

Job Opening for the position : PWC

Payroll Company: Netconnectglobal (30Yrs Old Organization, ISO Certified)

Project Deployment: PWC

Location: Mumbai (Airoli)

Note: Employment with NCG Project from PWC

The Application Security Analyst at Level 3 is a crucial role within the ITES sector, based in Mumbai. This position is responsible for ensuring the security of applications through various testing methodologies and security assessments.

Description

• xperience in application security, specifically in security testing and vulnerability assessments.
• Proficiency in understanding and applying OWASP Top 10 security practices, secure SDLC methodologies, and threat modeling.
• Experience with security tools such as Burp Suite, OWASP ZAP, Checkmarx, Fortify, and Veracode to conduct vulnerability assessments.
• Familiarity with programming languages such as Java, Python, JavaScript, or C#, and basic understanding of Linux and networking.
• Knowledge of authentication and authorization frameworks like OAuth, JWT, and SAML, and exposure to SQL Injection, XSS, and other vulnerabilities.
• Strong analytical and troubleshooting skills, with the ability to communicate complex security issues effectively to both technical and non-technical stakeholders.
• Preferred certifications include Certified Secure Software Lifecycle Professional (CSSLP), CompTIA Security+, and eJPT.

Key Responsibilities

• Perform Static (SAST), Dynamic (DAST), and Software Composition Analysis (SCA) using approved security tools to identify vulnerabilities.
• Validate and prioritize vulnerabilities identified by automated scanners, focusing on eliminating false positives to ensure accuracy.
• Conduct security assessments for web and mobile applications, focusing on common vulnerabilities as outlined in the OWASP Top 10.
• Collaborate with development teams to provide clear remediation recommendations for identified security issues and validate the effectiveness of fixes.
• Assist in secure code review processes, providing insights and guidance under the supervision of senior security engineers.
• Perform API security assessments, identifying potential risks and vulnerabilities in API designs and implementations.
• Participate in threat modeling and security design reviews, offering insights to improve the security posture of applications.
• Prepare detailed security assessment reports, maintain comprehensive documentation, and track the progress of remediation efforts. .

Interested Please share update profiles to [email protected]

Below Details Required for process:

Total Exp:

CCTC:

ECTC:

Notice Period:

Location:

F2F Available:

Please confirm av

Third-party Payroll Opening Y/N:

Octo Welocity Link Received :

AI Interview Can attend?

Regards

Bhavyashree

[email protected]