InfoSec L2 VM (App) Security Engineer

POSITION RESPONSIBILITIES Percent of Time • Conduct security testing and vulnerability assessments for various applications, including web applications, mobile apps, business systems, and APIs. • Assist in the identification, analysis, and prioritization of vulnerabilities, ensuring timely and effective remediation in collaboration with development teams. • Support the development and execution of secure coding practices and application security guidelines. • Monitor and interpret vulnerability scanning results to identify trends, root causes, and systemic risks, providing actionable insights to stakeholders. • Collaborate with the wider Vulnerability Management team and other stakeholders to maintain and improve security processes and tools. • Stay updated on emerging threats, vulnerabilities, and industry best practices to enhance testing methodologies and overall security strategies. • Create and maintain detailed documentation and reports to track security metrics and demonstrate compliance with applicable standards. 100% ORGANIZATIONAL RELATIONSHIPS • The Analyst will work closely with the Vulnerability Management Application Security Engineer and the onshore vulnerability management team to execute security testing initiatives. This role will also collaborate with: • Application Development teams to address vulnerabilities and implement secure coding practices. • Cloud and Application Security teams to align on strategy and processes. • Other stakeholders within the Zoetis Tech & Digital (ZTD) organization to support vulnerability remediation efforts. EDUCATION AND EXPERIENCE Education • University Degree in Computer Science or Information Systems is required • MS or advanced identity courses or other applicable certifications is desirable, including: o Certified Information Systems Security Professional (CISSP) • Relevant certifications in infrastructure security and vulnerability management, such as Offensive Security Certified Professional (OSCP), GIAC Certified Vulnerability Assessor (GCVA), or Certified Ethical Hacker (CEH), are highly preferred Experience • A minimum of 4+ years of relevant experience with a strong background in vulnerability management and security engineering. • 2+ years of experience in the pharmaceutical or other regulated industry, especially Animal Health. • Experience working with global teams across multiple time zones. • Demonstrated ability to work within diverse technical teams . TECHNICAL SKILLS REQUIREMENTS • Hands-on experience in application security assessments, penetration testing, or secure development practices. • Proficiency with application security and vulnerability scanning tools, such as Burp Suite, Veracode, and HCL AppScan. • Knowledge of web application, mobile app, and API penetration testing methodologies. • Familiarity with the Software Development Lifecycle (SDLC), secure coding practices, and application development processes. • Understanding of application security vulnerabilities (e.g., OWASP Top 10), security frameworks (e.g., NIST), and risk mitigation strategies. • Experience working with cloud platforms such as AWS and Azure is desirable. • Strong analytical skills and a detail-oriented approach to identifying and addressing vulnerabilities. • Excellent verbal and written communication skills to create reports and collaborate with internal teams. • Must be fluent in both written and spoken English, with the ability to communicate effectively across technical and non-technical audiences. PHYSICAL POSITION REQUIREMENTS Availability to work between 1pm IST to 10pm IST hours (minimum 3 hours of daily overlap with US ET Time zone) Full time