Application Security and Vulnerability Management Experts

Educational Requirements Master of Computer Science Post Graduate In Computer Science Application (PGDCSA) MCA Intergrated course BCA+MCA Bachelor Of Comp. Applications Bachelor of Comp. Sc. Engg. BCA Bachelor of Engineering Service Line Cyber Security Responsibilities SAST, DAST, Infra VM, Qualys, Nessus, Tenable, Red teaming, Purple teaming, vulnerability Management, Penetration testing Application Security Perform secure code reviews (manual automated) for applications written in languages like Java, Python, JavaScript, etc. Integrate security into CI/CD pipelines (DevSecOps practices). Conduct risk assessments, threat modeling, and security design reviews. Identify, analyze, and report vulnerabilities such as OWASP Top 10 issues. Work closely with development teams to remediate security flaws. Penetration Testing Conduct black-box, gray-box, and white-box penetration testing on: Web applications Mobile applications (Android/iOS) APIs and microservices Perform network and infrastructure security assessments when required. Use automated tools and manual techniques to discover vulnerabilities. Develop detailed penetration testing reports with risk ratings and remediation recommendations. Security Tools Technologies Utilize tools such as: Burp Suite, OWASP ZAP Nmap, Metasploit Nessus, Qualys SAST/DAST tools (e.g., Checkmarx, Veracode, Fortify) Create custom scripts for automation and testing (Python, Bash, etc.). Preferred Skills: Application Security Vulnerability Management Application Security->Vulnerability Assessment/Penetration Testing Application Security->Nessus Application Security->Vulnerability Management Application Security->Wireshark Application Security->Burpsuite Application Security->Threat Modeling Application Security-&Web Security Application Security->Application Risk Profiling Application Security-&Ethical Hacking(CEH) Application Security->Webservices Security Application Security->SSL(Secure Sockets Layer) Application Security->Devsecops Security testing->Vulnerability testing Technology->Application Security->Vulnerability Management->Rapid 7 Nexpose Technology->Application Security->Vulnerability Management->Qualys