10 дней назад
Analyst Information Security (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Analyst Information Security (Cybersecurity): Onboarding servers and applications to enterprise vulnerability scanning platforms and executing SAST, DAST, and IAST assessments with an accent on secure code reviews, vulnerability remediation, and DevSecOps integration. Focus on automating security controls in CI/CD pipelines, coordinating risk remediation, and supporting secure-by-design implementation across development, infrastructure, and cloud environments.
Location: Pune, India; hybrid with at least two days per week in the assigned office
Company
develops data and information solutions and supports security, innovation, and professional growth across its global workforce.
What you will do
- Onboard servers and applications to enterprise vulnerability scanning platforms.
- Execute and manage SAST, DAST, IAST, and infrastructure security assessments.
- Conduct secure code reviews and validate remediation of identified vulnerabilities.
- Integrate automated security controls into CI/CD pipelines and DevSecOps workflows.
- Track, report, and drive closure of application and infrastructure security findings.
- Collaborate with development, infrastructure, and cloud teams on secure-by-design implementation and continuous security assurance.
Requirements
- 2–3 years of experience in vulnerability assessment and security scanning for servers and applications.
- Hands-on experience with SAST, DAST, IAST, and open-source dependency scanning tools.
- Knowledge of SSDLC, secure coding principles, OWASP Top 10, CWE, and SANS Top 25.
- Experience onboarding applications and servers to enterprise security tools and validating vulnerability remediation.
- Understanding of CI/CD pipelines and DevSecOps security-control integration.
- Familiarity with Linux, Windows, web applications, APIs, cloud environments, vulnerability tracking, and risk remediation coordination.
Culture & Benefits
- Hybrid work combining virtual responsibilities with regular in-person office work.
- Focus on work/life flexibility and professional and personal wellbeing.
- Opportunities to collaborate with teams across the globe.
- Support for professional development, innovation, and contribution to community-focused initiatives.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →