AppSec DevSecOps - Dynamic Application Sec testing (DAST)

Role Overview: As a Cybersecurity Specialist at Kyndryl, you will play a crucial role in protecting the company's customers' computer systems and networks from cyber threats. You will use various tools and techniques to defend against malware, ransomware, phishing attacks, and data breaches. Additionally, you will have the opportunity to implement new cybersecurity systems and policies, monitor potential threats, conduct proof-of-concepts with new cybersecurity software, and contribute to the organization's knowledge of cybersecurity threats and best practices. Furthermore, you will perform penetration testing, threat and vulnerability assessments, respond to cybersecurity breaches, and assist in the creation and implementation of security solutions. This role also involves working on security innovation projects to explore new ideas in the field of cybersecurity. Key Responsibilities: - Protect Kyndryl's customers' computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction - Use a variety of tools and techniques to defend against cyber threats such as malware, ransomware, phishing attacks, and data breaches - Implement new cybersecurity systems and policies to ensure the protection of customers' data and assets - Monitor and review potential threats from various cybersecurity systems - Conduct proof-of-concepts with new cybersecurity software to evaluate effectiveness and potential integration - Provide automation scripts for threat hunting in customer environments - Conduct penetration testing and threat and vulnerability assessments - Respond to cybersecurity breaches and identify intrusions - Research and evaluate cybersecurity threats, perform root cause analysis, and assist in the creation and implementation of security solutions - Work on security innovation projects to explore new ideas in cybersecurity Qualifications Required: - Possess 7+ years of experience in configuring and managing DAST scans using Fortify WebInspect across CI/CD and ad hoc needs - Lead threat modeling and manual validation of Fortify WebInspect findings - Perform manual security testing to cover business logic and abuse cases - Provide second-level triage of critical/high-risk vulnerabilities - Conduct DAST tool coverage reviews and feature utilization evaluations - Have experience in second-level AppSec reports/findings discussions with application stakeholders for critical issues, false positives, exceptions, etc. - Guide application teams in remediation planning and secure design discussions - Ensure DAST testing and report delivery within SLA, and track metrics - Mentor analysts and contribute to security automation opportunities - Familiarity with tools such as MicroFocus Fortify, Web Inspect, GitHub, and PaloAlto Prisma Cloud (Note: The additional details about the company were not provided in the job description.) Role Overview: As a Cybersecurity Specialist at Kyndryl, you will play a crucial role in protecting the company's customers' computer systems and networks from cyber threats. You will use various tools and techniques to defend against malware, ransomware, phishing attacks, and data breaches. Additionally, you will have the opportunity to implement new cybersecurity systems and policies, monitor potential threats, conduct proof-of-concepts with new cybersecurity software, and contribute to the organization's knowledge of cybersecurity threats and best practices. Furthermore, you will perform penetration testing, threat and vulnerability assessments, respond to cybersecurity breaches, and assist in the creation and implementation of security solutions. This role also involves working on security innovation projects to explore new ideas in the field of cybersecurity. Key Responsibilities: - Protect Kyndryl's customers' computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction - Use a variety of tools and techniques to defend against cyber threats such as malware, ransomware, phishing attacks, and data breaches - Implement new cybersecurity systems and policies to ensure the protection of customers' data and assets - Monitor and review potential threats from various cybersecurity systems - Conduct proof-of-concepts with new cybersecurity software to evaluate effectiveness and potential integration - Provide automation scripts for threat hunting in customer environments - Conduct penetration testing and threat and vulnerability assessments - Respond to cybersecurity breaches and identify intrusions - Research and evaluate cybersecurity threats, perform root cause analysis, and assist in the creation and implementation of security solutions - Work on security innovation projects to explore new ideas in cybersecurity Qualifications Required: - Possess 7+ years of experience in configuring and managing DAST scans using Fortify WebInspect across CI/CD and ad hoc needs - Lead threat modeling and manual va