Security Analyst

Inclusion without Exception:

Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity is reflected in our people stories across our workforce and implemented through equitable workplace policies and processes.

About TCS:

TCS is an IT services, consulting, and business solutions organization that has been partnering with many of the world’s largest businesses in their transformation journeys for over 55 years. Its consulting-led, cognitive-powered portfolio of business, technology, and engineering services and solutions is delivered through its unique Location Independent Agile™ delivery model, recognized as a benchmark of excellence in software development. A part of the Tata group, India's largest multinational business group, TCS employs over 612,000 of the world’s best-trained consultants in 55 countries. The company generated consolidated revenues of US $29 billion in the fiscal year ended March 31, 2024,[BS1] and is listed on the BSE and the NSE in India. TCS' proactive stance on climate change and award-winning work with communities across the world have earned it a place in leading sustainability indices such as the MSCI Global Sustainability Index and the FTSE4Good Emerging Index.

Skills and Responsibilities:

• Security Threat modelling Identify security threats in data flow Using STRIDE and PASTA Modelling and perform threat analysis for mapped threats

• Proficiency in generating manual security testing report from POST MAN and Burp Suite

• Application Architecture Review and Security Requirements Review, asses the IP of various Environment of applications

• Proficiency in Application Composition & SBOM artifacts for Application releases.

• Proficiency in delivering results from Tenable Scan for On Prem applications and Wiz Scan for Cloud Applications

• Proficiency on assessment and perform security risk calculation (High, Low & Medium) based on client risk rating questionnaire

• Proficiency in Synk- Tool to perform SAST (Static Analysis Security Testing)

• Proficiency in Wiz-Cloud Tool to perform Infra scan

• Proficiency in Tenable Tool to perform On prem Infra scan

• Proficiency Burp Suite Tool to perform Web App Pen Testing

• Proficiency PostMan Tool to perform API Pen testing

• Proficiency in Parrot OS-Environment - Security Framework OS

• Good knowledge in Threat Modelling using tools like STRIDE

• Soft Skills/Teamwork - Good Communication skills & Team Player.

• Work experience in Vulnerability Management & Performance Testing for Web Application and Web API

• Work experience and Proficiency exploitation of vulnerabilities

• Work experience in Secure Build Pipelines and CI/CD Security Integration

• Work experience in Manual Security Testing (DAST, SAST) and Architecture Design Review.

• Good Knowledge in Common Application Secure Coding, Vulnerabilities & Remedies.

• Good knowledge in Threat Modelling using tools like STRIDE

• Soft Skills/Teamwork - Good Communication skills & Team Player.

Tata Consultancy Services Canada Inc. is committed to meeting the accessibility needs of all individuals in accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code (OHRC). Should you require accommodations during the recruitment and selection process, please inform Human Resources.

Thank you for your interest in TCS. Candidates that meet the qualifications for this position will be contacted within a 2-week period. We invite you to continue to apply for other opportunities that match your profile.