Job Details Job Description Title: Application Security Code Review - SAC Location: Dallas Fort Worth Duration: Contract Key Responsibilities Ability to identify, triage, and remediate issues such as injection flaws, insecure deserialization, and misconfigurations. Integrate and manage SAST and DAST tools within CI/CD pipelines. Collaborate with development teams to remediate vulnerabilities and enforce secure coding standards. Design and implement guardrails for AI-powered applications, mitigating risks like prompt injection, model inversion, and data poisoning. Develop and maintain security policies, procedures, and documentation. Conduct security assessments and provide actionable recommendations. Analyze complex problems and implement effective solutions or workarounds. Mentor junior engineers and promote security awareness across teams. Build and maintain CI/CD pipelines using tools like CloudBees, Jenkins, Buddy, UrbanCode, etc. Develop automation solutions using Python, Java, or PowerShell. Work with APIs, endpoints, and databases to develop integrated security solutions. Use IDEs such as Visual Studio, Visual Studio Code, Eclipse for secure development and debugging. Implement and manage GitHub Advanced Security features including code scanning, secret scanning, and Dependabot alerts. Apply extensive experience working with DevOps tools such as GitHub, including workflows, actions, and advanced workflow automation. Understand and remediate security vulnerabilities across multiple programming languages. Work with Azure Resource Manager (ARM) and scripting tools including PowerShell, Azure CLI, JavaScript, Shell scripts, Python, or similar. Collaborate within an Agile team environment using Azure DevOps. Familiarity with OWASP Dependency-Check and similar tools to manage third-party risks Required Qualifications Minimum 8 years of experience in application security or software engineering with a security focus. Strong programming skills in one or more languages (e.g., Python, Java, JavaScript, C. At least 3 years of experience developing automation solutions using Python, Java, or PowerShell. Preferred Qualifications Hands-on experience with SAST and DAST tools (e.g., Veracode, GitHub) Deep understanding of security vulnerabilities in multiple programming languages (e.g., Python, Java, JavaScript, C. Solid understanding of OWASP Top 10 and familiarity with SANS Top 25 vulnerabilities. Experience with AI security concepts and mitigation strategies. CompTIA Security+ certification or equivalent. Experience with cloud-native security (AWS, Azure, GCP Experience developing solutions that combine data from APIs, endpoints, and databases. Outstanding communication and strong analytical skills. Ability to function effectively in a globally diverse work environment. Clearly communicates risks, solutions, and security posture to technical and non-technical stakeholders. Experience with GenAI risk mitigation (e.g., prompt injection, data leakage Knowledge of container security and infrastructure-as-code scanning. Certifications such as CISSP, OSCP, or GIAC are a plus. Do Ensuring customer centricity by providing apt cybersecurity Monitoring and safeguarding the log sources and security access Planning for disaster recovery in the event of any security breaches Monitor for attacks, intrusions and unusual, unauthorized or illegal activity Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems Conduct security assessments, risk analysis and root cause analysis of security incidents Handling incidents escalated by the L1 team in 24x7 rotational shifts Use advanced analytics tools to determine emerging threat patterns and vulnerabilities Completing all tactical security operations tasks associated with this engagement. Analyses all the attacks and come up with remedial attack analysis Conduct detailed analysis of incidents and create reports and dashboards Stakeholder coordination & audit assistance Liaise with stakeholders in relation to cyber security issues and provide future recommendations Maintain an information security risk register and assist with internal and external audits relating to information security Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues Advice and guidance to employees on issues such as spam and unwanted or malicious emails Deliver No. Performance Parameter Measure 1. Customer centricity Timely security breach solutioning to end users, Internal stakeholders & external customers experience 2. Process Adherence Adherence to SLAs (90-95%), response time and resolution time TAT Mandatory Skills: Application Security Code Review - SAC (link removed) Experience: 5-8 Years (link removed) The expected compensation for this role ranges from $60,000 to $135,000 (link removed) Final compensation will depend on various factors, including your geographical location, minimum wage obligations, skills, and relevant experience. Based on the position, the role is also eligible for Wipro's standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options. Applicants are advised that employment in some roles may be conditioned on successful completion of a post-offer drug screening, subject to applicable state law. Wipro provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Applications from veterans and people with disabilities are explicitly welcome. Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.
Read Less
