HCL AppScan Product _Delivery Consultant (Application Security Products)

JOB DESCRIPTION: -

Role Summary: -

The HCL AppScan Delivery Consultant owns end-to end delivery of HCL AppScan Engagements — Onpremises (AppScan Enterprise, Standard, Source, 360°) and SaaS (AppScan on Cloud).

Attribute Detail :-

• Job title Consultant — AppScan Delivery (On-Premises / AppScan on Cloud)
• Business unitHCLSoftware — Cybersecurity (AppScan) Services / Professional Services
• Experience:- 8–15 years in Application Security, of which 5+ years hands-on with HCL AppScan (or legacy IBM AppScan).

Locations: - Noida, Chennai, Mumbai, Bengaluru, Hyderabad or Pune (hybrid)

Employment type: Full-time, permanent

Required qualifications and experience: - Candidates must meet every item below; the experience bands are minimum, not targets.

• 8 to 15 years in Application Security, Security Consulting or Security product deliveryAppScan experience 5+ years hands on with HCL AppScan (Enterprise, Standard, Source, 360° or AppScan on Cloud), including legacy IBM AppScan; at least 5 end-to-end implementations delivered.
• Deployment models Delivered at least one on-premises (AppScan Enterprise or Source) and one AppScan on Cloud implementation; understands the trade-offs between them
• AppSec testing depth Working knowledge of SAST, DAST, IAST and SCA: how each finds issues, their blind spots, and how to tune scan policies and triage results.
• DevSecOps integration Integrated security scanning into at least two CI/CD platforms (Jenkins, Azure DevOps, GitLab CI, GitHub Actions or equivalent) and one defect tracker (Jira, ServiceNow or equivalent) Customer-facing.
• Led design workshops and steering reviews with customer security and engineering leadership; comfortable presenting to CISO level.
• EducationBachelor's degree in computer science, Engineering or a related field, or equivalent experience.
• Communication Fluent written and spoken English.

Technical skills: -

Depth in the AppScan product family is non-negotiable; the surrounding platform, toolchain and standards knowledge is what lets the lead design and defend a solution in front of a customer architecture board.

Preferred qualifications: -

• HCL AppScan product certifications (HCLSoftware U) across two or more products
• Industry certifications: CISSP, CSSLP, CEH, OSCP, GWAPT or equivalent
• Cloud certifications at SecOps/Associate level or above on AWS, Azure or GCP
• Experience delivering AppSec programmes in regulated sectors (BFSI, government, healthcare, telecom) with audit-evidence obligations
• Hands-on secure-coding or development background in Java, .NET or JavaScript
• Experience running managed AppSec or scanning-as-a-service operations with SLAs.