Specialist II - Information Security

UST; Chennai District; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

UST in Chennai, India, seeks an experienced Application Security professional to conduct comprehensive security testing and coordinate with developers to remediate issues. You will align testing with regulatory requirements and corporate policies, translating findings into actionable guidance for engineers.

The role requires advanced knowledge of SAST/DAST tools, threat modeling, and cloud security, with a strong focus on DevSecOps integrations and secure coding practices.

Qualifications

• Bachelor's degree in CS/IT or equivalent.
• 5+ years in application security testing.
• Experience with SAST, DAST, and SCA tools.
• Knowledge of DevSecOps and cloud security.

Responsibilities

• Conduct thorough application security penetration tests.
• Coordinate findings with cross-functional teams.
• Advise application owners on secure coding and threat modeling.
• Collaborate with DevOps to ensure security tooling effectiveness.

Skills

SAST & DAST

Threat Modelling

Penetration Testing

DevSecOps

AI automation

Education

Bachelor's degree in CS/IT

GWAPT/OSCP/CSSLP

Advanced degree preferred

Tools

SAST tools

DAST tools

SCA tools

CI/CD integrations

Job description

Job Summary

Conduct application security testing in order to comply with corporate policies, and regulatory requirements. Coordinate and execute application security tests, communicate the results to relevant stakeholders, and help application developers understand how to fix code security issues.

Responsibilities

• Conduct thorough application security penetration tests


• Work effectively with a cross-functional team to plan, execute, and communicate findings from application security testing


• Work with application owners to improve their knowledge and practical application of information security best practices, including but not limited to threat assessment, vulnerability prevention and secure coding practices.


• Partner with DevOps team to ensure application security tools such as SAST and DAST are performing well and generating accurate testing results.


• Flexibility to change direction and manage conflicting demands.

Experience

• 10 -12 years progressive Information Technology experience or equivalent specialized skills with 5+ years of application security experience.


• Experience in running & administrating static analysis (SAST), dynamic analysis (DAST), and Software Composition Analysis (SCA) tools and processes


• Experience in conducting and training application penetration testing


• Experience in Cloud Security.


• Experience and strong understanding of DevSecOps processes, tools, and integrations.

Qualifications

• Strong knowledge and ability to work with DevOps teams on the processes and integrations.


• Strong web application security knowledge with thorough understanding of web, mobile, and API testing


• Knowledge of application security architecture and ability to perform threat modeling and risk assessments on identified applications.


• Knowledge of DevSecOps processes and ability to work with the stakeholders to deliver the results for security integrations in DevOps.


• Development background in .Net, Java, and/or Python a plus


• Strong knowledge of Security Standards, frameworks and groups (OWASP, WASC, OSSTMM)


• Knowledge of the software development lifecycle under agile environment in a large enterprise


• Knowledge of database, application and Web server design


• Knowledge of current and emerging security technologies, threats and techniques for exploiting security vulnerabilities


• Knowledge of public cloud services

Education

• Bachelors degree in Computer Science, Information Technology or equivalent


• Advanced degree preferred


• Certifications including GWAPT, GWEB, GPEN, OSCP, CSSLP, CASE, or similar preferred

Skills & Competencies

• Application Security (SAST, DAST, SCA, secrets management)


• Threat Modelling


• Penetration Testing


• DevSecOps and Cloud Security


• Ability to leverage AI/LLMs and automation in security processes


• Strong coding and integration capabilities to build or automate workflows


• Automation and AI


• Security workflow automation

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.