Cyber Security Analyst – L3

Job Description

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information,

visit us at www.wipro.com

.Application Security Specialist

Basic Qualifications

• Direct full-time information security, static code review, remediation, testing, software development, or software engineering.
• Familiarity with popular web application languages and platforms. For example, JavaScript, HTML, .NET, Java Groovy, and Python or other similar technologies.
• Knowledge of secure development of web applications and mobile applications
• Hands on experience leading technical integration-heavy in modern security tools, especially; Checkmarx SAST, CheckmarxOne, NexusIQ, and/or Blackduck, Veracode, Snyk.
• Experienced in conducting end-to-end static analysis, using at least one commercial, application scanning tool.
• Experienced in application onboarding, triaging, remediation with application teams and verifying proposed findings.
• Hands-on development experience, working with, or developing RESTful APIs in a modern, automated development environment – including a deep understanding of CI/CD.
• Organize, maintain, and report on project workflows, statuses, and technical tasks.
• Identify, facilitate, and track on-going process and automation-based process improvements.
• Ability to quickly adapt to new technologies, tools and techniques
• Ability to perform in a fast paced, dynamic work environment and meet aggressive deadlines
• Ability to work with technical and non-technical team members
• Strong technical writing and verbal communication skills

Experience Qualifications

• 5+ years of experience SAST and SCA security tools; Checkmarx and CheckmarxOne, and Nexus IQ
• 5+ year of experience developing new queries and customizing the existing security tools queries that are not out of the box to find new vulnerabilities
• 5+ years of experience conducting end-to-end SAST and SCA analysis, using commercial application scanning tool.
• 5+ years of experience application onboarding, triaging, remediation with application teams and verifying proposed findings.
• 3+ years of recent, hands-on development experience, working with, or developing RESTful APIs in a modern, automated development environment – including a deep understanding of CI/CD.
• 3+ years, with expert-level skills, in SDLC workflow management tools like Jira, Confluence, SharePoint or similar.

Expected annual pay for this role ranges from $100000 to $150,000. Based on the position, the role is also eligible for Wipro’s standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options.͏DoEnsuring customer centricity by providing apt cybersecurity * Monitoring and safeguarding the log sources and security access

• Planning for disaster recovery in the event of any security breaches
• Monitor for attacks, intrusions and unusual, unauthorized or illegal activity
• Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems
• Conduct security assessments, risk analysis and root cause analysis of security incidents
• Handling incidents escalated by the L1 team in 24×7 rotational shifts
• Use advanced analytics tools to determine emerging threat patterns and vulnerabilities
• Completing all tactical security operations tasks associated with this engagement.
• Analyses all the attacks and come up with remedial attack analysis
• Conduct detailed analysis of incidents and create reports and dashboards

Stakeholder coordination & audit assistance * Liaise with stakeholders in relation to cyber security issues and provide future recommendations

• Maintain an information security risk register and assist with internal and external audits relating to information security
• Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues
• Advice and guidance to employees on issues such as spam and unwanted or malicious emails