Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Industry X Security
Good to have skills : NA
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:

As an Application Security Consultant, your typical day involves performing security assessments, vulnerability assessments, and penetration testing across web applications, mobile applications, APIs, cloud environments, and network infrastructures. You will be responsible for identifying security vulnerabilities, recommending remediation strategies, and implementing robust security controls to protect critical business assets. You will leverage your expertise in application security, threat modeling, security testing methodologies, DevSecOps practices, and security frameworks to enhance the organization's security posture while supporting clients in managing evolving cyber threats.

Roles & Responsibilities:

Expected to perform independently and become an SME.
Required active participation/contribution in team discussions.
Contribute in providing solutions to work related problems.
Perform security assessments, vulnerability assessments, and penetration testing across web applications, mobile applications, APIs, cloud platforms, and network environments.
Conduct security research and vulnerability analysis to identify emerging threats and security risks.
Architect, strategize, recommend, and implement application security solutions to address business and technical security requirements.
Perform threat modeling, secure code reviews, vulnerability assessments, reverse engineering, and security testing activities.
Lead solution engineering activities and oversee project delivery for security engagements.
Collaborate with business development and solution engineering teams to translate business opportunities into security solutions and technical requirements.
Support the development of new cybersecurity capabilities, services, frameworks, and offerings.
Assist in presales activities, proposal development, and marketing initiatives related to Application Security, Cloud Security, and Industrial Security services.
Provide guidance and recommendations on secure development lifecycle practices and security best practices.
Work closely with cross-functional teams to integrate security throughout the software development and deployment lifecycle.
Mentor team members and contribute to knowledge-sharing initiatives across the organization.

Professional & Technical Skills:

Must To Have Skills: Application Security, Web Application Security, Mobile Application Security (Android & iOS), API Security, Cloud Security, Network Security, Vulnerability Assessment and Penetration Testing (VAPT).
Good To Have Skills: Container Security, Embedded Security, IoT/IIoT Security, DevSecOps.
Minimum 6 years of experience in Security Research, Security Consulting, Security Assessments, and Penetration Testing engagements.
Strong expertise in architecting, strategizing, recommending, and implementing security solutions.
Extensive experience with security threats, vulnerability research, and secure software development lifecycle best practices.
Hands-on experience in threat modeling, security code reviews, vulnerability assessments, reverse engineering, exploitation techniques, mitigation development, fuzzing, and penetration testing.
Experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Threat Modeling methodologies.
Hands-on experience with industry-standard security testing tools including Burp Suite, Metasploit, Nessus, Fortify SCA, WebInspect, Black Duck, IBM AppScan, Acunetix, Netsparker, Wireshark, Nmap, Drozer, and Kali Linux.
Strong understanding of Windows and Linux operating systems from a security testing perspective.
Experience in programming and scripting languages such as Java, Python, Perl, and Ruby.
Familiarity with DevSecOps practices and CI/CD tools such as Jenkins.
Good exposure to cybersecurity standards and frameworks including PCI DSS, ISO 27001, NIST, OWASP, WASC, HIPAA, SOX, and MITRE ATT&CK Framework.
Ability to lead solution engineering engagements and manage end-to-end security project delivery.
Strong understanding of risk management, security architecture, and secure application development practices.
Mandatory possession of one or more industry-recognized security certifications such as CEH, CHFI, ECSA, OSCP, CISSP, CISO, CISM, CompTIA Security+, or GSEC.

Additional Information:

The candidate should have a minimum of 6 years of experience in Application Security, Security Consulting, and Penetration Testing.
Experience supporting security presales activities, capability development, and cybersecurity service creation will be an added advantage.
Strong written and verbal communication skills are essential.
Demonstrated ability to deliver results while working effectively in cross-functional teams.
Experience in secure software development lifecycle practices and DevSecOps implementation is preferred.
This position is based at multiple locations.
A 15 years full time education is required.

15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us at www.accenture.com 

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.