E
Hiring companyEY
Verified today
Risk Consulting - Digital Risk - Senior - Application Security
Noida,UP,IN Full-time On-site
About the role
Risk Consulting - Digital Risk team at EY focuses on safeguarding client applications through rigorous security assessments and threat modelling. The Senior Application Security Reviewer conducts threat modelling, secure code reviews, and dynamic testing, while guiding development teams to remediate vulnerabilities. Based in Noida, hybrid work model with on-site presence required, relocation assistance available.
What you’ll do
- Conduct threat modelling and create threat models
- Perform secure code reviews and SAST/DAST/IAST testing
- Collaborate with developers to remediate vulnerabilities
- Prepare and present security assessment reports
- Guide application onboarding and security processes
What you’ll bring
- 4+ years threat modelling experience
- 4+ years security assessment and testing
- Cross‑functional project experience
- Client‑facing role experience
- Basic coding skills
Skills
Threat ModellingSecure Code ReviewSASTDASTIASTApplication SecurityStakeholder Engagement
Education
Bachelor's degree