Security Analyst

Experience Range: 5 to 10 years

Locations: Thane / Bangalore/Chennai/Pune/NCR

Required Technical Skillset:

1.Expertise in JavaEE architecture  

2.Exposure to in cloud-native architecture  

3.Experience in Java Application Design and architecture along with modern technologies like Apache Kafka, Container orchestration and microservices architecture.

4.Strong knowledge of common application security vulnerabilities (OWASP Top 10, CWE/SANS, API Security Top 10). 

5.Expertise in secure coding practices for Java, Spring, REST APIs, microservices. 

6.knowledge of cryptography principles, digital certificates, TLS, HSM/KMS.

7.Hands on experience with SAST, DAST, SCA, IAST, container scanning tools (e.g., Fortify, SonarQube —) 

8.AWS/Azure security controls, IAM, VPC architecture, zero trust principles.

Must Have:

1.Experience of working in Core Banking & Digital Banking environments  will be preferred 

2.Experience troubleshooting API security, session management, certificates, encryption, and secure token flows.

3.Working knowledge of Java or other backend languages used in Core Banking systems. 

4.Familiarity with REST APIs, microservices, CI/CD pipelines, and secure deployment practices. 

5.Basic understanding of cloud environments (AWS/Azure/GCP) and security controls.

6.Understanding of banking sector security regulations and data protection requirements.

7.Understanding of digital banking channels, secure API consumption, authentication protocols, and risk controls.

8.Good analytical abilities

9.Good Communication skills

10.Bachelor's degree in IT, Computer Science, Cybersecurity, or related fields. 

11.Certifications preferred: CEH, Security+, or equivalents

Responsibilities:

1. This role will report into Application Security Architect 

2. Application Security Analyst to be responsible for hands on work in analysis , design and implementation of application security  across Core Banking and Digital Banking platforms. The role ensures that applications—especially mission-critical banking systems—are  built, configured  and deployed with security by design, meeting regulatory, compliance, and enterprise standards.

3. Working closely with engineering teams, enterprise security groups, customers, and technology partners to embed industry leading security controls into banking products.

4. Detailed review of Application Security Mechanisms & Standards including external APIs, internal interfaces, token & certificate-based authentication, secrets management, SSO, OAuth2, OpenID Connect.

5. Review and fine tune Data Security Mechanisms—encryption at rest/in motion, key management, database security hardening. Collaborate with stakeholders to gather requirements and translate them into technical solutions

6. Participate in discussions with Prospects , Customers ( CISO) and partners to present / defend the application security for TCS BaNCS solutions

7. Review the VAPT frameworks , policies and help the VAPT team ( internal or external) to finalize the policies deployed for the VAPT.

8. Monitor and Analyze the observations from VAPT  and provide the directions / solutions for the observations 

9. Work on Implementing  & reviewing cloud security controls (IAM, KMS, WAF, network segmentation, container security).