Verified Job
IT / Software / Data Analyst
Cyber Security Architect
IT / Software / Data Analyst
#247068
Remote / WFH
Job Description
Cyber Security Architect
Exp-10 Years -20 Years
Job Location- Kolkata / Hyderabad/Chennai/ Bangalore/Pune / Mumbai/ Ahmedabad/ Gurgaon.
What the role entails(Key Responsibilities)
1. Define a framework for security design reviews and represent the security
team in the architecture review discussions.
2. Perform Cyber Security Audits and Penetration Tests and mitigation of
Cyber Security Vulnerabilities.
3. Perform cyber investigations and maintain forensic evidence as needed.
4. Develop relevant application security training for the engineering group.
5. Improve safe coding practices, application security requirements, and
automation.
6. Integrate threat modelling practices into the Software Development
Lifecycle.
7. Maintain an active understanding of industry practices for secure software
development and incident response.
8. Review, analyse, and evaluate internally developed software to address
security requirements.
+. Provide vulnerability remediation guidance and mentoring to product
development teams.
10. Develop organization-wide security projects to discover security defects in
source code, dependencies, and other artifacts.
11. Collaborate with the security compliance team to develop adequate and
audit-able security controls that adhere to security frameworks and agile
practices.
12. Work with customers and engineering teams to help them understand
modern security practices.
13. Stay up to date on application security attack vectors and risks.
What we are looking for in you
Candidate must have at least one of the following security certifications from
accredited bodies, for this role:
• CompTIA Pen Test+
• Licensed Penetration Tester (LPT)
• Certified Ethical Hacker (CEH)
• GIAC Certified Penetration Tester (GPEN)
• GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
• Certified Information Systems Security Professional (CISSP)
• Extensive Cloud knowledge, application security knowledge, and application
penetration testing experience.
• Excellent understanding of common software security issues and remediation
techniques (OWASP Top 10, SANS 25, Mitre ATT&CK, etc.)
• Expert skills w.r.t SAST, DAST, IAST.
• Hands-on experience performing white and grey box penetration testing and
system exploitation against applications, operating systems, servers, and desktops.
• Experience with analysing vulnerabilities and delivering clear and coherent
written reporting, identifying risks, and providing mitigation recommendations.
• Experience with conducting penetration and malicious user testing in the cloud
and on-prem environments.
• Expert knowledge of risk assessment procedures, policy formation, role-based
authorization methodologies, authentication technologies, and security attack
pathologies
Exp-10 Years -20 Years
Job Location- Kolkata / Hyderabad/Chennai/ Bangalore/Pune / Mumbai/ Ahmedabad/ Gurgaon.
What the role entails(Key Responsibilities)
1. Define a framework for security design reviews and represent the security
team in the architecture review discussions.
2. Perform Cyber Security Audits and Penetration Tests and mitigation of
Cyber Security Vulnerabilities.
3. Perform cyber investigations and maintain forensic evidence as needed.
4. Develop relevant application security training for the engineering group.
5. Improve safe coding practices, application security requirements, and
automation.
6. Integrate threat modelling practices into the Software Development
Lifecycle.
7. Maintain an active understanding of industry practices for secure software
development and incident response.
8. Review, analyse, and evaluate internally developed software to address
security requirements.
+. Provide vulnerability remediation guidance and mentoring to product
development teams.
10. Develop organization-wide security projects to discover security defects in
source code, dependencies, and other artifacts.
11. Collaborate with the security compliance team to develop adequate and
audit-able security controls that adhere to security frameworks and agile
practices.
12. Work with customers and engineering teams to help them understand
modern security practices.
13. Stay up to date on application security attack vectors and risks.
What we are looking for in you
Candidate must have at least one of the following security certifications from
accredited bodies, for this role:
• CompTIA Pen Test+
• Licensed Penetration Tester (LPT)
• Certified Ethical Hacker (CEH)
• GIAC Certified Penetration Tester (GPEN)
• GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
• Certified Information Systems Security Professional (CISSP)
• Extensive Cloud knowledge, application security knowledge, and application
penetration testing experience.
• Excellent understanding of common software security issues and remediation
techniques (OWASP Top 10, SANS 25, Mitre ATT&CK, etc.)
• Expert skills w.r.t SAST, DAST, IAST.
• Hands-on experience performing white and grey box penetration testing and
system exploitation against applications, operating systems, servers, and desktops.
• Experience with analysing vulnerabilities and delivering clear and coherent
written reporting, identifying risks, and providing mitigation recommendations.
• Experience with conducting penetration and malicious user testing in the cloud
and on-prem environments.
• Expert knowledge of risk assessment procedures, policy formation, role-based
authorization methodologies, authentication technologies, and security attack
pathologies
