Join NTT DATA as a Security Center Operations Analyst in Noida, India. This role is pivotal in safeguarding our applications by identifying, assessing, and coordinating the remediation of security vulnerabilities. You will collaborate closely with development teams, vendors, and stakeholders to ensure our applications meet stringent security requirements and industry best practices.

Your responsibilities will include managing security findings from various testing methodologies like SAST, DAST, and SCA. You'll track vulnerabilities through their lifecycle, coordinate with internal teams and external vendors for fixes, and validate remediation efforts. A key part of this role involves enforcing security policies and standards throughout the Software Development Lifecycle (SDLC).

Key responsibilities include reviewing application security findings from SAST, DAST, SCA, API security, and penetration tests. You will track vulnerabilities until closure, coordinate remediation with development, infrastructure, and cloud teams, and validate fixes. Engaging with OEM vendors to resolve security bugs, software defects, and technical issues is crucial. You will also enforce security policies, generate security and operational reports, and support secure application deployment processes.

This role involves supporting security testing activities such as SAST, DAST, SCA, API security assessments, and penetration testing. You will analyze findings, prioritize remediation, and provide guidance to development teams. Reporting on open vulnerabilities, remediation SLA compliance, and security posture to stakeholders is also a core function. Continuous improvement of application security processes and controls is highly encouraged.

We are seeking candidates with a Bachelor's degree in Cyber Security, Computer Science, Information Technology, Software Engineering, or a related field. Equivalent professional experience will also be considered.

For a Mid-Level Analyst position, 3–5 years of experience in Application Security, Security Operations, Software Development, or Vulnerability Management is required. Senior Analysts should have 5–8 years of experience supporting enterprise application security programs.

Essential technical skills include experience with Application Security Tools such as SAST (e.g., Checkmarx, Fortify), DAST (e.g., Burp Suite, OWASP ZAP), and SCA (e.g., Snyk, Black Duck). A strong understanding of security knowledge including OWASP Top 10, CWE, Secure SDLC, DevSecOps, Threat Modeling, and Secure Coding Practices is vital. Experience with platforms like Web Applications, APIs, Cloud Platforms (AWS, Azure), Containers, Kubernetes, and CI/CD Pipelines is expected.