Cyber Security Consultant

HCLTech is a global technology company, home to more than 220,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services.

We are seeking a skilled Cybersecurity Consultant (AppSec / security in project) to join our Cyber security team, In this role, you will focus on ensuring the security of our applications by identifying vulnerabilities, implementing secure development practices, and collaborating with the development and operations teams to secure the entire software lifecycle. You will play an essential role in securing our systems and preventing potential threats and breaches.

Expected Deliverables

- Risk assessments

- Security improvement recommendations

- Secure architecture design

- Acceptance test evidences

- Compliance reports

- Meetings and committees minutes

- Follow up and monitoring reports

- Process definitions and workflows

- Dashboards

Responsibilities:

• Collaborate with development teams to integrate security into the software development lifecycle (SDLC).
• Collect and validated evidences to comply with our security framework and regulation like GDRP on all security domain (foundation, IAM,D&R..)
• Perform risk assessments and threat modeling on applications.
• Assist in incident response and investigations related to application security breaches or vulnerabilities.
• Update referential in collaboration with the architecture's teams.
• Conduct security training and awareness for development teams to promote secure by design principles
• Collaborate with internal teams and external vendors to enhance application security.
• Assess 3rd party security audit and deliver risk analysis report.

Expertise(s) / technology(ies)

The expertise expected to perform this service is listed below:

- Cybersecurity knowledge and experiences

- Familiar with NIST and ISO 27001