Company : Thales
Location : Noida
Work Mode : On Site
Key Skills : C/C++, Security, Cryptography
Key Roles and Responsibilities
- Secure Software Development: Design, develop, and maintain secure software applications following secure coding standards.
- Application Security: Identify and address security vulnerabilities in applications, APIs, and software components.
- Security Code Reviews: Review source code to detect security weaknesses, coding errors, and potential risks.
- Vulnerability Assessment: Analyze vulnerabilities such as SQL injection, cross-site scripting (XSS), and authentication weaknesses.
- Programming and Coding: Develop software using languages such as Java, Python, C++, C#, or JavaScript, depending on project requirements.
- Security Testing: Perform or support static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA).
- Threat Modeling: Assess potential threats and design appropriate security controls to protect applications and sensitive data.
- API Security: Implement secure authentication, authorization, input validation, and access-control mechanisms for APIs.
- DevSecOps Integration: Integrate security checks into CI/CD pipelines to identify vulnerabilities early in the development lifecycle.
- Bug Fixing and Troubleshooting: Investigate software defects and security issues and implement effective fixes.
- Security Standards Compliance: Follow relevant secure development standards, internal policies, and industry best practices.
- Collaboration: Work with developers, cybersecurity teams, QA engineers, and architects to improve application security.
- Documentation: Maintain security assessment reports, vulnerability records, technical documentation, and remediation guidance.
- Continuous Improvement: Monitor emerging security threats and recommend improvements to software architecture and development practices.
Skills Required
- Programming: Java, Python, C++, C#, or JavaScript
- Secure coding practices
- Application security principles
- OWASP Top 10
- SAST, DAST, and SCA tools
- API security and authentication
- Git and CI/CD tools
- Vulnerability analysis and debugging
- Problem-solving and teamwork
