Lead Application security

6+ years of Information Security background is essential.

• 4+ years of Software Development Lifecycle, Security reviews in project lifecycle

• Experience in evaluating the control environment through Architecture, Software Design reviews and or not limited to Threat Modelling.

• Security reviews of design flaws

• Hands on experience in Static Application Security Testing and Dynamic Application Security Testing.

• Experience in standardizing application security tools and methodology

• Should be familiar with the best practices of OWASP, SANS Institute, ISACA, GAO, FISCAM, NSA, NIST, Internet Engineering Task Force (IETF) • Develop a detailed security framework to be followed by developers in every steps of software development lifecycle.

• Experience in software/application analysis tools like SAST, DAST, SCA, IAST, RASP, threat modelling, etc.