Job Description

Description:1. Experience or understanding of various threat modeling approaches pertaining to one or more of the following methodologies: STRIDE, PASTA, TRIKE, ATTACK.
2. Specific expertise in application security concerns such as OWASP Top 10, input validation, output encoding, authentication and authorization, session management, cryptography, etc.
3. Experience in communicating with users, other technical teams, and senior management to collect requirements, describe software product features, technical designs, and product strategy.
4. Ability to work independently and within a team environment.Requirements:Experience : 6+ Years1. 6+ years of direct or related experience in application security or computer science or related Information security experience.
2. 3-5 years of work experience in dynamic application security testing to configure/analyze/troubleshoot scans
3. Experience or understanding of various threat modeling approaches pertaining to one or more of the following methodologies: STRIDE, PASTA, TRIKE, ATTACK.4. Specific expertise in application security concerns such as OWASP Top 10, input validation, output encoding, authentication and authorization, session management, cryptography, etc.
5. Experience in communicating with users, other technical teams, and senior management to collect requirements, describe software product features, technical designs, and product strategy.
6. Ability to work independently and within a team environment.
7. Expert knowledge of operating system, application, network, and database security architectures.
7. Exposure to the Agile SDLC process and agile tools such as JIRA, Confluence etc.Preferences:DockerJob Responsibilities:1. Drives strategic product security efforts of proprietary solutions with architecture teams to ensure that all newly developed and legacy applications and infrastructure implementations are in line with security policy and comply to the required frameworks (ISO, PCI, OWASP, NIST, etc.).2. Prevent attack exposure through threat modeling, system audits, system hardening and policy compliance.3. Possess in-depth knowledge of OWASP top 10 and other similar frameworks to lead a team of product security analysts.4. Security reviews for smart IIoT devices, Web applications, Cloud infrastructure reviews etc.5. Experience with anomaly detection and observability tools such as ELK, Prometheus, Grafana, Influx etc.6. Experience with SAST and DAST tools such BurpSuite, Tenable etc.7. Develop DevSecOps capabilities including identifying security scanning tools (SAST, DAST, IAST,SCA) to be integrated into SDLC processes8. Build security tooling, automation, and dashboards for efficiency and high observability of threat profile of proprietary solutions.9. Work closely with other teams to develop and promote security architectures to protect microservices, serverless, containers, application development and operations practices.10. Define and own metrics and key performance indicators to determine the effectiveness of the security automation program.What We OfferExciting Projects: We focus on industries like High-Tech, communication, media, healthcare, retail and telecom. Our customer list is full of fantastic global brands and leaders who love what we build for them.Collaborative Environment: You Can expand your skills by collaborating with a diverse team of highly talented people in an open, laidback environment - or even abroad in one of our global centers or client facilities!Work-Life Balance: GlobalLogic prioritizes work-life balance, which is why we offer flexible work schedules, opportunities to work from home, and paid time off and holidays.Professional Development: Our dedicated Learning & Development team regularly organizes Communication skills training(GL Vantage, Toast Master),Stress Management program, professional certifications, and technical and soft skill trainings.Excellent Benefits: We provide our employees with competitive salaries, family medical insurance, Group Term Life Insurance, Group Personal Accident Insurance , NPS(National Pension Scheme ), Periodic health awareness program, extended maternity leave, annual performance bonuses, and referral bonuses.Fun Perks: We want you to love where you work, which is why we host sports events, cultural activities, offer food on subsidies rates, Corporate parties. Our vibrant offices also include dedicated GL Zones, rooftop decks and GL Club where you can drink coffee or tea with your colleagues over a game of table and offer discounts for popular stores and restaurants!About GlobalLogic GlobalLogic is a leader in digital engineering. We help brands across the globe design and build innovative products, platforms, and digital experiences for the modern world. By integrating experience design, complex engineering, and data expertise-we help our clients imagine what\'s possible, and accelerate their transition into tomorrow\'s digital businesses. Headquartered in Silicon Valley, GlobalLogic operates design studios and engineering centers around the world, extending our deep expertise to customers in the automotive, communications, financial services, healthcare and life sciences, manufacturing, media and entertainment, semiconductor, and technology industries. GlobalLogic is a Hitachi Group Company operating under Hitachi, Ltd. (TSE: 6501) which contributes to a sustainable society with a higher quality of life by driving innovation through data and technology as the Social Innovation Business.

GlobalLogic