Application Lead-zOS

Primary Skills:

• Candidates should have overall 10+ years of IT experience.
• Should have experience as Application Lead using COBOL, JCL, PL/1, Assembler, MQ, CICS, DB2, IMS-DB, SQL.

Experience in the following:

• Identifying and remediating application vulnerabilities.
• Cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge on system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, sequel injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
• Candidates should have a thorough understanding and working knowledge of OWASP practices
• Experienced in DevSecOps Tools and Agile Delivery Methodology
• Knowledge on developing applications with security policy/framework
• Leading  scrum teams on how to implement security policies on the applications
• Understanding or knowledge of security scanning tools and utilities such as Qualys, Veracode, Manual Penetration  
• Testing, CAST and implementing scans  in application development cycle
• Knowledge of coding best practices
• Automation Testing and Test Driven Development
• Cryptography and cryptographic key management concepts (optional)
• Ethical hacking principles and techniques. (optional)

Certifications preferred:

• Certified Application Security Engineer (CASE)