Cyber Security Lead

About the company

Coforge is a global digital services and solutions firm that helps organizations modernize and transform through technology. Its work spans sectors such as banking, insurance, travel, healthcare, and the public sector, with a strong emphasis on innovation, cloud, cybersecurity, and digital transformation.

Role overview

The organization is seeking an Application Security Engineer with solid experience in security testing, vulnerability analysis, and integrating security tools into development workflows. The role calls for practical knowledge of web applications, APIs, cloud security, and secure development practices.

Key responsibilities

• Carry out both manual and automated application security reviews, including vulnerability scanning.
• Administer and support application security platforms such as SAST, DAST, SCA, API security, and CI/CD security integrations.
• Detect, assess, and help resolve security weaknesses across applications and cloud-based environments.
• Work closely with development teams to build security into every stage of the software development lifecycle.
• Help develop new product capabilities, improvements, and technology enhancements.
• Run security tests and verify findings using standard tools and accepted frameworks.
• Draft security assessment documentation and suggest practical remediation actions.

Required capabilities

• Strong grasp of web application architecture, APIs, and cloud security fundamentals.
• Hands-on exposure to tools such as Checkmarx, Fortify, Burp Suite, Nessus or Tenable.io, Kali Linux, Nmap, Metasploit, and Wireshark.
• Working knowledge of application security testing methods, including SAST, DAST, SCA, and API security.
• Understanding of DevSecOps principles and security integration within CI/CD pipelines.
• Good analytical ability with strong troubleshooting and debugging skills.
• Ability to work independently while staying adaptable and collaborative.

Preferred knowledge

• Familiarity with OWASP Top 10 risks and secure coding approaches.
• Exposure to cloud platforms such as AWS, Azure, or GCP.
• Awareness of container security and Kubernetes security practices.
• Security certifications such as CEH, Security+, GWAPT, CSSLP, or OSCP are advantageous.
• Basic scripting or automation experience with Python, PowerShell, or Bash is a plus.

Additional information

This is a full-time, on-site role based in Greater Noida, India. The role is open to any graduate. Experience required is 3 to 8 years. No salary, stipend, number of openings, start date, or application deadline was specified. Coforge is an equal opportunity employer and welcomes applicants from all backgrounds, without discrimination on the basis of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital or civil partnership status, sexual orientation, gender identity, or any other protected status.

Contact

For more information, contact [email protected].