Cyber Security Professional - Application Security

• Vulnerability Management: -Knowledge of vulnerability management processes, including regular scanning,assessment, and remediation of vulnerabilities.
• Experience withvulnerability scanning tools.
• DevSecOps Practices: -Knowledge of integrating security into CI/CD pipelines, including automatedsecurity testing and continuous monitoring.
• Experience with securitytools for CI/CD such as SonarQube, OWASP ZAP, etc
• Application Security: -Familiarity with secure coding practices and common vulnerabilities (eg,OWASP Top Ten).
• Experience with staticapplication security testing (SAST) and dynamic application security testing(DAST).
• Automation and Scripting: -Proficiency in scripting languages (PowerShell or Python) to automate securitytasks and integrate security checks into CI/CD pipelines.
• Ability to write scriptsfor automated compliance checks and security configurations.
• Cryptography: - Knowledgeof cryptographic principles and practices, including encryption, hashing, andkey management.
• Experience with using AzureKey Vault for managing secrets and encryption keys.
• Infrastructure as Code(IaC) Security: - Understanding of IaC security practices and tools to secureIaC scripts (Terraform, ARM templates, Bicep)
• Experience with tools likeSonar, OWASP, Wiz, or other tolls for scanning IaC for securityvulnerabilities.

• Required Qualification: BE/ B.Tech / MCA / M.Sc./ ME / M.Tech graduate in Computer Science, Electronicsor Electrical Engineering.
• Need one or more followingcertifications CEH/ CCSP/ CRTP/CRTE.
• Desired Qualification: M.Tech / MS (Cyber Law & IS) / M. Sc (Cyber Security), etc
• Certifications: CSSLP(mandatory).

Experience Required

• Hands-on experience inintegrating DecSecOps tools.
• Hands-on experience indeveloping end to end public key infrastructure.
• Experience in programmingor scripting languages like Python, Java Script
• Proficient in usingfollowing tools: Kali Linux, Metasploit, Intercepting Proxies, Wireshark.
• Experience in using networkprotocol analyzers and sniffers, as we'll as ability to decipher packetcaptures.
• Experience in implementing secure by design solutions.
• Working knowledge of theNERC CIP regulation as we'll as the NIST SP 800-82, MITRE ATT&CK framework.
• Experience of implementingCIS & SANS security controls.
• Thorough knowledge of OWASPTop 10 and allied Top 10 s.