Application Lead (Java & Web Technologies)

Primary Skills:

• Candidates should have overall 10 years of IT experience.
• Should have experience as Application Lead using Java/J2EE technology under these platforms WebLogic, WebSphere, JBOSS, Tomcat, JRE. 
• Frameworks: Spring, STRUTS, UI framework, Angular, JavaScript.

Experience in the following:

• Identifying and remediating application vulnerabilities.
• Cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability,
• authentication, non-repudiation).
• Knowledge on system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site
• scripting, sequel injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
• Candidates should have a thorough understanding and working knowledge of OWASP practices
• Experienced in DevSecOps Tools and Agile Delivery Methodology
• Knowledge on developing applications with security policy/framework
• Leading  scrum teams on how to implement security policies on the applications
• Understanding or knowledge of security scanning tools and utilities such as Qualys, Veracode, Manual Penetration  
• Testing, CAST and implementing scans  in application development cycle
• Knowledge of coding best practices
• Automation Testing and Test Driven Development
• Cryptography and cryptographic key management concepts (optional)
• Ethical hacking principles and techniques. (optional)

Certifications preferred:

• Certified Application Security Engineer (CASE)