SSDLC Sr. Engineer For RBIT

Honeybee Tech Solutions; Mumbai; Vor Ort; INR 1.500.000 - 2.100.000; Vollzeit

Zusammenfassung

Honeybee Tech Solutions seeks a Sr. SSDLC Engineer for a prestigious client, ReBIT. You will drive secure SDLC practices, review microservices APIs, and lead vulnerability assessments across the application lifecycle.

Key focus areas include OWASP/NIST guidance, threat modeling, and cloud/VMware exposure. Strong stakeholder communication and agile collaboration are essential for success in this role.

Qualifikationen

• Strong experience with secure SDLC processes and security governance.
• Proficient in OWASP and NIST security guidelines.
• Experience in microservices API security reviews.
• Hands-on with SAST/DAST/SCA and tooling for security assessments.
• Experience in cloud platforms and VMware environments.
• Knowledge of threat modeling methods (PASTA, STRIDE) is a plus.

Aufgaben

• Perform security reviews aligned with best practices.
• Conduct SCA, SAST, and DAST assessments and report findings.
• Perform tech stack reviews with recommendations.
• Identify and eliminate false positives in security tools.
• Report and track vulnerabilities with development teams.
• Support RFP processes and SSDLC tool implementations.
• Escalate risks and ensure timely resolution.
• Provide regular status updates to stakeholders.

Kenntnisse

Secure SDLC

Waterfall/Agile

OWASP/NIST knowledge

Threat Modeling

Security Reviews

Vulnerability management

Cloud/VMware

RFP support

Ausbildung

CSSLP/CISSP/SSCP

Security certifications (OWASP/Agile/API)

Tools

SAST tooling

DAST tooling

SCA tooling

Tech stack reviews

Jobbeschreibung

Dear Candidate,

Greetings from Honeybee Tech Solutions!

We have an exciting opportunity for the role of SSDLC Sr. Engineer with one of our prestigious clients, ReBIT.

Key Requirements

• Strong experience in Secure SDLC methodologies (Waterfall Agile)
• Knowledge of OWASP and NIST security guidelines
• Experience in Microservices API Security reviews
• Hands-on experience with:
  • SAST (Source Code Analysis)
  • DAST (Dynamic Application Security Testing)
  • SCA (Software Composition Analysis)
  • Tech Stack Review
• Exposure to Cloud platforms / VMware
• Ability to identify vulnerabilities and threat actors across application lifecycle
• Knowledge of Threat Modeling (PASTA, STRIDE) (Good to have)

Core Skills

• Strong analytical and problem-solving skills
• Excellent communication and stakeholder management
• Ability to work in Agile environments
• High integrity and ability to handle confidential information
• Ability to prioritize tasks in a fast-paced environment

Responsibilities

• Perform security reviews aligned with best practices
• Conduct SCA, SAST, and DAST assessments and report findings
• Perform tech stack reviews with recommendations
• Identify and eliminate false positives in security tools
• Report and track vulnerabilities with development teams
• Support RFP processes and implementation of SSDLC tools
• Escalate risks and ensure timely resolution
• Provide regular status updates to stakeholders

Certifications (Preferred)

• Csslp / cissp / SSCP or equivalent
• OWASP certifications, Agile certifications, or API Security specialization (Plus)

Employment Details

• Full-time Fixed-Term Contract (5 years)
• Extendable based on mutual consent
• Exclusive to ReBIT