University degree in the field of computer science or IT.
Experience (years):
10 or years of Information Security background is essential.
5-8 years of Software Development Lifecycle, Security reviews in project lifecycle
Should have good understanding DevOps pipeline and security control implementation.
Security reviews of DevSecOps.
Hands on experience in Static Application Security Testing and Dynamic Application Security Testing.
Automate DevSecOps pipeline with the help of DevOps.
Should be familiar with the best practices of OWASP, SANS Institute, ISACA, GAO, FISCAM, NSA, NIST, Internet Engineering Task Force (IETF)
Develop a detailed security framework to be followed by developers in every step of software development lifecycle.
Experience in software/application analysis tools like SAST, DAST, SCA, IAST, RASP, threat modelling, etc.Industry: Information technologyResponsibilities
Conduct gap of assessments DevSecOps pipeline time to time.
Coordinate with DevOps teams for ensuring security posture DevSecOps.
Prepare security effectiveness reports for management.
Testing the applications / systems for SSDLC framework to RBI / ReBIT Information Security practices
Ensure new applications are inducted into Data centre after conducting SSDLC assessments.
Follow up on closure of these gaps and escalate when necessary.
Define and enhance application security requirements and standards which must be designed for agile development methods leveraging traditional application architectures.
Assist DevSecOps team to create secure predictable CI/CD pipeline processes and enable application teams to develop new capabilities securely.
