hiring for Java Application Security
- Affluent Global
- 8 to 12 Yrs
- Bengaluru
- 3 years ago
- Email to a friend
- Report this job
Job Description
Dear candidates,
Greetings,
Profile:Java Application Security
Work Location:Bangalore
Experience:8 to 12 years
Experience in Web Application Security with hands on exp in Application Development like [Java, Javascript, C/C++, Python, Ruby, Perl]
Any 1 tool is mandatory: Metasploit, w3af, Blackduck, Veracode & burp suite.
Primary and Secondary Skills Requirements:
1. Primary Skills: Development language - Java development, Javascript, Python, Ruby,C++/C#, PerlApplication Security etc
2. Secondary Skills: Security penetration testing tools - Metasploit, w3af, Blackduck, Veracode & burp suite (any one or two)
3. Other Skills: Jenkins,Pivotal tracker, Cloud Foundry ,AWS
Job Description
1. CEH, CSSLP, or CISSP, GSEC, GIAC, GPEN, SDLC certification preferred.
2. Must have strong business acumen with ability to work with application development, QA and security teams.
3. A strong understanding of application security frameworks
4. Thorough knowledge of the OWASP Top 10
5. Must have a solid understanding of application security code reviews and penetration testing.
6. 10+ years experience in application development and security.
7. Practical understanding and use of commercial application security tools
8. Must be fluent in write technical reports based on findings.
9. Highly proficient with development languages including Java, Groovy, Ruby, C,C++, Python.
10. Strong self-starter who has the ability to operate independently.
11. Good understanding on Networking concepts.
12. Solid understanding and experience with establishing application security policies across an organization.
13.Excellent oral/written presentation skills with ability to communicate effectively with senior executive leadership; proficiency in preparation of presentations, analytical reports, and documents regarding program operational status, achievement and performance.
14. Understanding and passion for Agile/XP/Scrum/Kanban
15. Understanding of Test Driven Development built on User Stories
16. Understanding of Continuous Integration/Testing/Delivery
17. Expert in Metasploit, Burp Suite, Fuzzing, Gaunlt, and Jenkins is preferred
18. Exposure on Veracode, BlackDuck and etc.,,
The Application Security Engineer will be responsible for integrating security into the development of Allstates applications. The Application Security Engineer will work closely with the product and software development team to threat model, vulnerability scan, and pen test the early software, system, and network architecture and identify required control points in the application stack. The Application Security Engineer will also work closely with developers to diagnose, document, and remediate application security vulnerabilities. The Application Security Engineer will also be responsible for evaluating, recommending, and implementing application security related software in an automated continuous integration/deployment environment.
Key responsibilities:
1. Work closely with application development and QA teams to help formulate and implement a strategy for software security that is tailored to the specific risks facing the organization, including threatmodeling and applications security advisement services.
2. Develop and maintain a balanced application security program based on a well-defined application security framework
3. Conduct application security assessments / penetration tests and implement tools for dynamic/automated code reviews
4. Ensure application design and implementation best-practice with role-based and appropriate access standards, as well as integration with Identity and Access Management environments.
5. Ensure compliance with society, regulatory, and industry standards for application security.
6. Continuously evaluate the organizations existing application security practices, define and measure security-related activities, and demonstrating concrete improvements to the application assurance program within the organization.
7. Provide secure application development training to developers and provide guidance on the development of web-based training for ongoing awareness.
8. Conduct source code reviews and penetration testing
9. Develop and maintain unit and integration tests designed to ensure security controls are tested on every build
If interested pls specify the skill set in the subject line & provide the following details along with a copy of your resume on*******a@af*******s.com
Current CTC
Expected CTC
Notice Period
Current Location
Regards,
Team HR
Employement Category:
Employement Type: Full timeIndustry: IT - Software
Role Category: Application Programming / Maintenance
Functional Area: Not Applicable
Role/Responsibilies: hiring for Java Application Security
Contact Details:
Company: Affluent GlobalLocation(s): Bengaluru
Similar positions
Affluent Global
Affluent Global Services Pvt. Ltd. About the Employer Established in 2015, Affluent Global IT PRIVATE LIMITED is an Emerging Systems Integration company providing end-to-end IT Infrastructure management solutions and services to enterprises across India and globally. The company has been conferr...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in
