Security Test Lead Position @ Alpha Management

Experience in leading the creation and adoption of enterprise security testing tools.
Software development & test, and web application penetration testing background.
Partner, guide and inspire development teams to address security concerns.
Web application penetration testing knowledge and experience in software development & testing.
Expert knowledge in SAST and DAST solutions and techniques.
Export in multiple security static and dynamic testing tools.
Expert knowledge in application vulnerability types, attack vectors and remediation approaches.
Industry best practices for secure software development & testing as well as web application security; including IAST and RAST technologies.
Expert understanding of the IP protocols and associated security mechanisms: TCP/IP, HTTP, SSL/TLS, PKI.
Familiarity with well-known application security sources and standards such as OWASP, WASC and NIST.
Assess current practices and identify and implement relevant policies to ensure state of the art testing practices as they relate to security
Constantly monitor new security research findings. Understand, learn and then apply new techniques, attack vectors and vulnerability types into the Security QA program at TDA
Determine the selection of Software QA (SQA) program elements including supporting tools
Define enterprise risk management and governance approach for SQA controls
Conduct software security testing, including penetration testing, to confirm the results of design and code analysis, investigate software behavior, and verify that the software complies with security requirements
Perform software focused attack surface reviews and both static code, OSS and dynamic application assessments
Review, inspect and walk through source code to help developers understand vulnerabilities and provide advice to developers on remediation
Develop application specific threat models to identify security design flaws and provide guidance on application specific risks and controls. (complex to highly complex)
Introduce new technologies for scanning vulnerabilities and work with application developers to ensure they are integrated and used consistently
Design the strategy, standards, and architecture for the security aspects of the SDLC including application, mobile, web service, DevOps, cloud, and CI/CD efforts.
*For more information check us out @ https://www.birlasoft.com/#
If interested, Kindly send across your updated resume to the email ID mentioned below.
Else, Feel free to share references.

Thanks&Regards
Yogalakshmi
TA Talent Acquisition
9360344***
yo********i@al*************s.in
Alpha Management Consultants