Security Audit & Compliance / 9+ years / Pune/Bangalore/Hyderaba

Job Description

Description:Looking for Security Audit & Compliance with 9+ years of experienceLocation - Pune/Bangalore/Hyderabad/NagpurNotice Period : Immediate/15 DaysSkill Description - Security Audit & Compliance ResponsibilityBe a product security champion by driving Security Architecture and Design/implementation/optimization for Web, API and Mobile backend applications.Engage in the initial requirements definition (including analysis of threats and risks and alignment with security, Engineering, IT and Architecture standards.Conduct and facilitate security reviews, threat modelling including deep design reviews throughout the development lifecycle.Facilitate table-top/red-team/scenario analysis exercises in conjunction with other SMEs; and plan the resolution of any identified vulnerabilities/issues.You ll be working on enabling/building security on various platforms and technologies which protect the applications from attacks like:o HSMs, Tokenization systems, data encryption solutions from Safenet, Vormetric etc. Web technologies like HTTP, SOAP, REST services, AJAX. Basic level understanding of Cross Border transaction and Security requirement.Automate security tools and processes ensuring innovation and advancement strategies that keep pace in the areas of access control, security-in-depth, secure transaction processing, secure coding practices for web and mobile applications.Help business and product team to achieve various compliance certifications like PCI, FFIEC etc.Be responsible for overall planning, direction and oversight of multiple projects, products, services or functions.Identify and analyze system and application level vulnerabilities to provide recommended counter measures or mitigating controls that reduce risk to an acceptable and manageable level.Be part of the team, which formulate direction, design orExperience in building secure applications preferably payment platforms, systems that can withstand all types of threats from various threat agent.Conducted or be part of team that conducted threat modelling exercises on networks and systems to identify all the threats the systems is exposed to and recommended mitigations controls to address those threats.Good understanding of current compliance, regulatory and legal requirements relevant to the transaction processing industry such as PCI, HIPPA, SOX, and GLB.Knowledge of administrative, physical and technical controls that could be built around networks, systems and applications to secure them.A good knowledge in designing security controls for complex web applications with backend services expertise such as API Gateway, Identity and Access Management Services, Data Protection technologies, Security Information Event Management etc.Good knowledge of design review and Secure Development Lifecycle methodologies, Agile based methodologies, middleware platforms, development platforms (Java, C, C++, .NET etc.). Skill - Security Audit & Compliance-SOAP UI-RESTful Web ServiceAbout PROLIM CorporationPROLIM is a leading provider of end-to-end IT , PLM and Engineering Services and Solutions for Global 1000 companies. They understand business as much as technology, and help their customers improve their profitability and efficiency by providing high-value technology consulting, staffing, and project management outsourcing services.Their IT and PLM consulting offerings include; Advisory, PLM Software/Services, Program Management, Solution Architecture Training/Staffing, Cloud Solutions, Servers/Networking, Infrastructure, ERP Practices and QA Services. Engineering services include Data Translation, CAD/CAM/CAE, Process & Product Engineering, Prototyping, and Testing/Validation within a wide range of markets and industries.,

Keyskills :
cross borderdesign reviewsecure codingaccess controlsecurity auditsecurity toolsevent managementweb technologiesproduct securityweb applicationscoding practices