Cyber Security Lead

Job description

**About Coforge** Coforge is a global digital services and solutions organization, delivering transformative technology solutions across industries including Banking, Insurance, Travel, Healthcare, and Public Sector. With a strong focus on innovation, cloud, cybersecurity, and digital transformation, Coforge empowers enterprises to stay ahead in a rapidly evolving digital landscape. **Role Summary** We are looking for a highly motivated **Application Security Engineer** with experience in application security testing, vulnerability assessment, and security tool integration. The ideal candidate should have a strong understanding of web applications, APIs, cloud environments, and secure software development practices. **Key Responsibilities** - Conduct manual and automated application security assessments and vulnerability scans. - Support and manage Application Security tools including **SAST, DAST, SCA, API Security**, and CI/CD security integrations. - Identify, analyze, and remediate security vulnerabilities across applications and cloud environments. - Collaborate with development teams to embed security throughout the software development lifecycle (SDLC). - Contribute to the development of new product features, enhancements, and technology improvements. - Perform security testing and validation using industry-standard tools and frameworks. - Prepare security assessment reports and recommend remediation strategies. **Required Skills** - Good understanding of **Web Applications, APIs, and Cloud Security** concepts. - Hands-on experience with security tools such as: - Checkmarx - Fortify - Burp Suite - Nessus / Tenable.io - Kali Linux - Nmap - Metasploit - Wireshark - Experience with **Application Security Testing** (SAST, DAST, SCA, API Security). - Familiarity with DevSecOps practices and CI/CD pipeline security integration. - Strong problem-solving, troubleshooting, and debugging skills. - Self-driven, flexible, and collaborative approach to work. **Good to Have** - Knowledge of OWASP Top 10 and secure coding practices. - Experience with cloud platforms such as AWS, Azure, or GCP. - Understanding of container and Kubernetes security. - Relevant security certifications such as CEH, Security+, GWAPT, CSSLP, or OSCP. - Knowledge of scripting or automation using Python, PowerShell, or Bash. **Experience:** 38 Years **Employment Type:** Full-Time Connect on vrinda.gupta@coforge.com for more insights