Lead SSDLC For the RBIT

Honeybee Tech Solutions; Mumbai; On-site; INR 400,000 - 700,000; Full time

Job summary

Honeybee Tech Solutions is seeking a Lead SSDLC for a client ReBIT to drive security across the SDLC. The role requires deep Information Security and SSDLC expertise.

You will perform risk assessments, implement security frameworks, conduct testing, and guide DevSecOps practices in Agile environments.

Candidates should have CISSP/CSSLP and hands-on with SAST/DAST/IAST/RASP and be able to collaborate with stakeholders.

Qualifications

• 6+ years in Information Security.
• 4+ years in SSDLC security reviews.
• Experience in threat modeling and architecture reviews.
• Hands-on with SAST/DAST/SCA/IAST/RASP tools.

Responsibilities

• Conduct internal and third-party SSDLC risk assessments.
• Ensure security framework implementation across all SDLC phases.
• Perform application security testing and compliance checks per RBI/ReBIT.

Skills

Threat Modeling

SSDLC Security Reviews

Security Architecture

Application Security Testing

CI/CD Security

SDLC Security Frameworks

Education

CISSP

CSSLP

Cloud Security Certification

DevSecOps / Automation Certification

Tools

SAST

DAST

SCA

IAST

RASP

Job description

Job Summary

Dear Candidate,

Greetings from Honeybee Tech Solutions!

We have an exciting opportunity for the role of Lead SSDLC with one of our prestigious clients, ReBIT.

Experience Qualifications

• 6+ years of Information Security experience
• 4+ years in Secure Software Development Lifecycle (SSDLC) security reviews
• Experience in:
  • Architecture Software Design Reviews
  • Threat Modeling
  • Identifying security design flaws
• Hands-on experience with:
  • SAST, DAST, SCA, IAST, RASP tools
• Experience in standardizing application security tools methodologies
• Strong knowledge of security frameworks and standards:
  • Owasp, SANS, isaca, GAO, fiscam, NSA, NIST, IETF
• Ability to define and implement security frameworks across SDLC phases

Key Responsibilities

• Conduct internal and third-party SSDLC risk assessments
• Ensure security framework implementation across all SDLC phases
• Perform application security testing and compliance checks as per RBI/ReBIT standards
• Prepare security effectiveness and risk reports for management
• Ensure secure onboarding of applications into data centers
• Track and ensure closure of identified vulnerabilities
• Define and enhance application security standards for Agile environments
• Support DevSecOps teams in building secure CI/CD pipelines
• Collaborate with project teams and stakeholders for secure delivery

Certifications (Any Two Preferred)

• CISSP
• CSSLP
• Cloud Security Certifications
• DevSecOps / Automation Certifications

Industry

• Information Technology