Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 1K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

RATE NOW!
- ABECA 2025
  
  RATE NOW!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Employer? Claim Account for FREE

Sterling crane

Compare

4.0

based on 1 Review

11 Sterling crane Jobs

Lead Engineer Application Security

Sterling Crane USA

4.0

based on 1 Review

6-8 years

Hubli, Mangaluru, Mysuru / Mysore + 2 more

1 vacancy

Lead Engineer Application Security

Sterling crane

posted 2mon ago

Job Role Insights

Flexible timing

Key skills for the job

Medical Coding Computer Science Python Linux Administration Javascript PHP

+ 4 more

Job Description

1. Lead Security Integration: Drive the implementation of security measures throughout the software development lifecycle, ensuring that security is prioritized at every stage.

2. SecOps Implementation: Collaborate with development and operations teams to integrate security practices into CI/CD pipelines, automating security testing and deployment processes.

3. Vulnerability Management: Conduct regular vulnerability assessments using SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tools, and coordinate remediation efforts with development teams.

4. Secure Code Review: Ensure all software code, including third-party components, undergo regular code reviews and static analysis to identify and remediate security vulnerabilities. Follow secure coding practices.

5. Security Architecture: Design and implement secure architecture patterns for applications and systems, considering factors such as encryption, authentication, and access controls.

6. Threat Modeling: Perform threat modeling exercises to identify potential security risks and develop strategies to mitigate them effectively.

7. Security Awareness: Educate development teams on secure coding practices, OWASP top 10 vulnerabilities, and emerging security threats to foster a security-conscious culture.

8. Incident Response: Develop and maintain incident response plans and lead investigations and post-incident reviews in the event of security breaches or incidents.

9. Compliance and Standards: Stay updated on industry regulations and compliance requirements related to application security, ensuring that our systems adhere to relevant standards.

10. Security Standards Documentation: Documentation of security practice and process during the development lifecycle.

11. Cloud Security: Implement and manage security controls for cloud-based applications and services, ensuring compliance with cloud security best practices.

Skills and Qualifications:

Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or other relevant certifications preferred.
Proficiency in programming languages such as Java, PHP, .net, C#, ASP.net, Python, or JavaScript
Professional Certified of Cloud, AWS, Azure.
Experience in (WAF, IAM - Okta, Auth 0, KMS - encryption, OpenSSL, key vault)
Knowledge PEN testing, Burp Suite or Metasploit, Kali Linux, Wireshark network packet analysing.
Aware of regulatory requirements GDPR, HIPAA
Awareness of AI, copilot, codewhisper, vulnerability scanning - How to use AI to do code review, and vulnerability scanning
Bachelor s degree in computer science, Information Security, or a related field.
6 - 8 years of experience in application security, software development, or a related field.
Proficiency in security testing tools such as SAST, DAST, and vulnerability scanners.
In-depth knowledge of secure coding practices, cryptographic protocols, and authentication mechanisms.
Familiarity with OWASP top 10 vulnerabilities and best practices for mitigating them.
Experience with DevOps, SecOps practices and tools, including CI/CD pipelines and infrastructure as code.
Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams.
Knowledge to have database and mobile app security.

Employment Type: Full Time, Permanent

Functional Areas: Software/Testing/Networking

Read full job description

What people at Sterling crane are saying

What Sterling crane employees are saying about work life

based on 1 employee

100%

Flexible timing

Monday to Friday

No travel

View more insights

Compare Sterling crane with

Vedanta Aluminium

3.9

Compare

Thriveni Earthmovers

4.0

Compare

African Industries

4.1

Compare

MN Dastur & Company

4.1

Compare

MSPL

4.0

Compare

Nalco

4.1

Compare

Jms Mining Services

3.8

Compare

Singareni Collieries Company

4.4

Compare

Ambey Mining

3.3

Compare

Rio Tinto

3.6

Compare

Pilot Industries

3.7

Compare

$Calderys India Refractories$

Calderys India Refractories

4.3

Compare

Imerys

4.0

Compare

Seco Tools

4.0

Compare

Weir Minerals

3.8

Compare

Maheshwari Mining

3.5

Compare

Kalinga Commercial Corporation

3.6

Compare

Sage Metals

3.5

Compare

Metalman Microturners

3.9

Compare

First Quantum Minerals

4.2

Compare

Similar Jobs for you

Applications Engineer at Marmon Holdings, Inc.

Hubli, Mangaluru + 3

6-8 Yrs

₹ 8-10 LPA

Applications Engineer at Marmon Industrial Energy Infrastructure

Hubli, Mangaluru + 3

6-8 Yrs

₹ 12-16 LPA

Applications Engineer at Coilmaster Corporation

Hubli, Mangaluru + 3

6-8 Yrs

₹ 8-10 LPA

Applications Engineer at Filtrex Technologies

Hubli, Mangaluru + 3

6-10 Yrs

₹ 11-15 LPA

Security Engineer 2 at InnovAccer

Noida

5-10 Yrs

₹ 10-14 LPA

Senior Leader Engineer at Filtrex Technologies

Hubli, Mangaluru + 3

5-11 Yrs

₹ 12-16 LPA

Senior Analyst at Circles

Bangalore / Bengaluru

3-6 Yrs

₹ 12-16 LPA

Quality Analyst at Arctic Wolf Networks

Bangalore / Bengaluru

2-5 Yrs

₹ 4-7 LPA

Test Engineer at Spectral Consultants

3-5 Yrs

₹ 10-20 LPA

Senior Software Engineer at JDA Software

Hyderabad / Secunderabad

3-6 Yrs

₹ 9-14 LPA