Senior Specialist - Application Security

Job description

The Senior Specialist in this position will lead end-to-end VAPT for web applications, APIs, Android and iOS using manual and automated techniques You will also define assessment scope, test strategy, attack scenarios and rules of engagement Apply OWASP, CWE, CVSS and relevant NIST guidance throughout assessments Validating exploitability, business impact and root cause; eliminate false positives You will also quality-assure findings for severity, evidence, reproducibility, remediation and reporting accuracy And manage UVM intake and triage – validation, deduplication, ownership, prioritisation and SLA tracking Also, assess patch and remediation options – applicability, dependencies, implementation risk and compensating controls

• Provide remediation guidance covering secure code, configuration, dependency upgrades, patching and architectural controls Along with performing retesting, residual-risk assessment, verified closure and exception/risk-acceptance support Also, maintain evidence, audit traceability, metrics, dashboards and management reporting
• Support threat modelling, security architecture, secure-design and pre-production reviews
• Review and correlate SAST, DAST, SCA and cloud/container security findings You will develop reusable testing methodologies, checklists, scripts and automation And mentor engineers; lead technical reviews, stakeholder discussions and complex security escalations