Application Security Consultant

Company Overview

ASPIA Infotech is a motivated, fast-paced, and growing company. We are a cybersecurity startup founded in 2018, We provide cybersecurity solutions and VAPT services to prominent startups and banks in India. We are working towards automation and simplification of cybersecurity for our customers, and we aspire to be one of the best cybersecurity companies in India. By applying at ASPIA for application security jobs, you get to work with a team of highly ranked security experts along with great perks.

Job Summary

ASPIA InfoTech Security team has an open position in application security jobs.  The team is looking for an Application Security Consultant who will be responsible for ensuring consistent Secure Software Development Lifecycle practices by working closely with product engineering teams to improve the security of ASPIA and client applications

Essential Duties and Responsibilities:

• Assess applications for vulnerabilities using manual and automated methods, threat modeling, code reviews, SAST/DAST/Open-Source tool scans, penetration testing
• Identify, document, rate, and communicate vulnerabilities in terms of Confidentiality, Integrity, and Availability
• Develop, enhance, and interpret security tools and standards across Visa enterprise
• Evaluate and recommend new security testing tools
• Develop, curate, and improve application security detections (static and dynamic) to identify vulnerabilities at scale

Required Knowledge, Skills, or Abilities:

• Deep understanding of OWASP Top 10 and CWE 25, with experience in implementing remediation strategies
• Deep knowledge and experience in using SAST, DAST, and Open-Source Vulnerability Scanning tools
• Hands-On Experience with any programming language (C#, JavaScript, Java, Go, Python, etc)
• Well-versed in web application design, penetration testing, application risk assessment, and risk categorization
• Well-versed with driving and implementing DevSecOps practices to develop the ability to successfully integrate security into a developer’s world
• Ability to effectively present and communicate security threats and risks to ANY audience and impress upon them the mitigation techniques and strategies
• Solid problem solving and analytical skills, able to quickly digest any issue/problem encountered and recommend an appropriate solution