Source description
About the role
Our client is a trusted global innovator of IT and business services. They help clients transform through consulting, industry solutions, business process services, digital & IT modernization and managed services. Our client enables them, as well as society, to move confidently into the digital future. We are committed to our clients long-term success and combine global reach with local client attention to serve them in over 50 countries around the globe. · Job Title: Application Security Engineer / DevSecOps Security Engineer · Location: Bangalore · Experience: 6+ yrs · Job Type : Contract to hire. · Notice Period:- Immediate joiners. Mandatory Skills: Good knowledge on Source code review Working exp. in Fortify tool Exp. in CICD tool, preferably in Azure dev-ops, Gitlab and Jenkins Exp. in Fortify tool installation and configuration Expert in Static Application Security ScanAnalysis source code review SAST Software Composition Analysis SCA Dynamic Application Security ScanAnalysis DAST Good knowledge of Application Threat Modeling Implemented DevSecOps Secure CICD integration Experience of building Security Gates threshold levels for build passfail Troubleshooting and Configuration of DevSecOps pipeline Demonstrated experience leading Security Design Reviews andor Architecture Risk Analysis Expertise in OWASP Good knowledge of NIST SANS PCI ISO 27001 Proficient with manual and automated scanner approaches Sound Knowledge of DevOps environment Preparing security advisories and defining the severity levels for the vulnerabilities Expert in code review false positive analysis Preparing monthly security reports for the management Expert in Scanning validation and reporting of vulnerabilities on daily and monthly basis Technologies Tools Security Tools Fortify Fortify AWB Fortify SSC Checkmarx Open Source Tools Visual Studio Eclipse Azure DevOps Jenkins etc Experienced good knowledge of Devop Tools technologies like Jenkins Ansible Chef Docker GitHubKubernetesRedHatOpen Shift Containers Bug tracking tools ticketing system etc
More at People Prime Worldwide