Tata Elxsi Looking for Application Security Engineer at Bengaluru, Karnataka, India Full Time

Tata Elxsi works with leading medical device OEMs and technology companies for market research and human factor engineering, hardware and software engineering, verification & validation, regulatory standards & compliance requirements along with technologies such as artificial intelligence, cloud and IoT.

Tata Elxsi’s Medical Device and Healthcare practice is ISO 13485 certified.

Job Description :

• Design and implement secure software development processes such as secure coding practices, code reviews, and secure deployment practices.
• Perform threat modelling and risk assessments and collaborate with developers and other stakeholders for remediation or security implementation activities.
• Conducts security audit, gap analysis, penetration testing and vulnerability assessment of software applications, infrastructure, and third-party vendors to identify vulnerabilities and recommend remediation strategies.
• Provides security training to developers and other stakeholders to ensure they are aware of best practices and understand their role in maintaining the security of the software development process.
• Collaborate with cross-functional teams such as developers, operations teams, and other stakeholders to ensure security is integrated throughout the software development process.
• Stays up to date with the latest security trends, threats, and best practices to ensure the security of the organization’s software development process and infrastructure.
• Monitor and analyse security process and tool integration.

Skill set

• Experience in Secure SDLC process and CI/CD pipeline.
• Good knowledge of security technologies for secure software development such as cryptography, authentication techniques, secret management, protocols etc.
• Exposure to penetration testing tools and techniques for web/API and mobile applications, identifying and exploiting business logic framework related vulnerabilities.
• Working knowledge of web &Mobile application security standards, frameworks, and protocols, such as OWASP, NIST, SSL/TLS, etc.
• Should have good working experience in Application security assessments such as SAST, DAST, SCA, IAST etc.
• Experience on both commercial and open-source App-Sec tools such as SonarQube, MobSF, Contrast, OWASP Dependency-Check, Cenzic Hailstorm, Burp Suite, AppScan, WebInspect, AppSpider, sqlmap, OWASP ZAP, BEEF, Metasploit, Veracode etc.
• Experience in cloud deployment best security practices, audit, and assessment.
• Provide expert security advice and recommendation to application development team.
• Ability to work in web/mobile application security assessments, hands on techniques for identifying SQL injections, XSS, CSRF, authentication, OWASP top 10 issues.
• Prior project work experience in agile framework.
• Good communication and inter-personal skills.
• The ability to learn on the job and keep up with the latest trends and technologies in cybersecurity.

Preferred Skillset / Certifications

CEH (Certified Ethical hacker), CDP (Certified DevSecOps Professional), CTMP (Certified Threat Modelling Professional).

DevSec Engineer:

Years of Experience: 3-6 Y ears

Educational Qualification : Graduate/Postgraduate (BS/MS/B.Tech/M.Tech/MCA) in

• Computer Science
• Information Technology /Software Engineering