Application Security

Job Title: Application Security Tester   Designation: Process Lead 

Job Summary: 

We are seeking a dedicated and detail-oriented Application Security Tester to join our team as a Process Lead. In this role, you will be responsible for ensuring the security of applications through rigorous testing and analysis. You will work closely with development and operations teams to integrate security practices into the software development lifecycle, with a strong emphasis on DevOps methodologies. Your expertise will help us identify vulnerabilities and implement effective security measures to protect our applications and data.  

Responsibilities:     Conduct comprehensive security assessments of applications, identifying vulnerabilities and recommending remediation strategies.   Collaborate with development teams to integrate security testing into the CI/CD pipeline, ensuring security is a fundamental aspect of the DevOps process.   Develop and maintain security testing frameworks and tools to enhance the efficiency and effectiveness of application security testing.   Perform threat modeling and risk assessments to identify potential security risks in application designs.   Provide guidance and training to development teams on secure coding practices and application security principles.   Stay updated on the latest security trends, vulnerabilities, and regulatory requirements to ensure compliance and best practices.   Document findings and create detailed reports for stakeholders, outlining security risks and recommended actions.   Participate in incident response activities, assisting in the investigation and resolution of security incidents.    

Mandatory Skills:   

Strong understanding of application security principles and practices.   Proficiency in security testing tools and methodologies.   Experience with DevOps practices and tools, including CI/CD pipelines.   Knowledge of programming languages such as Java, Python, or JavaScript.   Familiarity with security frameworks and standards (e.g., OWASP, NIST).   Excellent analytical and problem-solving skills.   Strong communication skills, with the ability to convey complex security concepts to non-technical stakeholders.   

Preferred Skills:   

Experience with cloud security and securing applications in cloud environments.   Knowledge of container security and orchestration tools (e.g., Docker, Kubernetes).   Certifications in application security (e.g., Certified Ethical Hacker, Certified Information Systems Security Professional).   Familiarity with Agile methodologies and project management practices.   

Qualifications:   

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.   Relevant certifications in application security or related disciplines are a plus.   Demonstrated ability to work collaboratively in a team-oriented environment.   Strong organizational skills and attention to detail.     If you are passionate about application security and have a strong background in DevOps, we encourage you to apply for this exciting opportunity to lead our security testing efforts.