Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Industry X Security
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:

As an Application Security Analyst, your typical day involves performing security assessments, vulnerability assessments, and penetration testing across web applications, mobile applications, APIs, cloud environments, and network infrastructures. You will identify security weaknesses, conduct threat analysis, and recommend remediation measures to strengthen the security posture of applications and systems. You will work closely with development, operations, and security teams to integrate security best practices throughout the software development lifecycle while helping protect critical business assets from emerging cyber threats.

Roles & Responsibilities:

Expected to perform independently and become an SME.
Required active participation/contribution in team discussions.
Contribute in providing solutions to work related problems.
Perform vulnerability assessments and penetration testing across web applications, mobile applications (Android and iOS), APIs, cloud platforms, and network environments.
Conduct security research and vulnerability analysis to identify and assess emerging threats and risks.
Perform threat modeling, security code reviews, vulnerability assessments, and security testing activities.
Identify, validate, and document security vulnerabilities along with remediation recommendations.
Support the implementation of secure software development lifecycle (SSDLC) practices across projects.
Collaborate with development and operations teams to integrate security into DevSecOps and CI/CD processes.
Utilize industry-standard security tools to perform comprehensive security assessments and penetration testing.
Support risk assessments and security reviews to improve application and infrastructure security posture.
Work with cross-functional teams to address security findings and implement corrective measures.
Contribute to security knowledge sharing and continuous improvement initiatives within the team.

Professional & Technical Skills:

Must To Have Skills: Application Security, Web Application Security, Mobile Application Security (Android & iOS), API Security, Cloud Security, Network Security, Vulnerability Assessment and Penetration Testing (VAPT).
Good To Have Skills: Container Security, Embedded Security, IoT/IIoT Security, DevSecOps.
Minimum 4 years of experience in Security Research, Security Consulting, Security Assessments, and Penetration Testing.
Strong understanding of security threats, vulnerability research, and secure software development lifecycle best practices.
Experience in threat modeling, security code review, vulnerability assessment, reverse engineering concepts, exploitation techniques, and mitigation strategies.
Hands-on experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Threat Modeling methodologies.
Proficiency with industry-standard security assessment and penetration testing tools including Burp Suite, Metasploit, Nessus, Fortify SCA, WebInspect, Black Duck, IBM AppScan, Acunetix, Netsparker, Wireshark, Nmap, Drozer, and Kali Linux.
Experience working in Windows and Linux environments.
Familiarity with DevSecOps practices and CI/CD tools such as Jenkins.
Good knowledge of cybersecurity standards and frameworks including PCI DSS, ISO 27001, NIST, OWASP, WASC, HIPAA, SOX, and MITRE ATT&CK Framework.
Understanding of secure coding practices, application security testing methodologies, and vulnerability management processes.
Possession of security certifications such as CEH, CHFI, ECSA, OSCP, CISSP, CISO, CISM, CompTIA Security+, or GSEC is preferred.

Additional Information:

The candidate should have a minimum of 4 years of experience in Application Security and Vulnerability Assessment & Penetration Testing.
Experience in web, mobile, API, cloud, and network security assessments is required.
Knowledge of DevSecOps practices and secure software development lifecycle processes is preferred.
Strong written and verbal communication skills are essential.
Demonstrated ability to deliver results while working effectively in cross-functional teams.
This position is based at multiple locations.
A 15 years full time education is required.

15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us at www.accenture.com 

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.