The Lead Security Analyst supports application security automation by integrating analysis tools, helping with vulnerability remediation, and training technical staff.
The Area: The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality, integrity and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security, policies and procedures, disaster recovery and compliance/regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure.
The Role: The Lead Security Analyst will assist in supporting Morningstar's application security automation program. This individual will help integrate static and dynamic security analysis tools into Morningstar's continuous integration processes, assist with security remediation activities, ensure that vulnerabilities are being remediated in a timely manner and support development and technical personnel as required. This position is based in our Mumbai location.
Responsibilities
+ Create, manage and maintain Jenkins continuous integration jobs to support application security automation
+ Administer common static and dynamic security assessment tools
+ Verify automated application security findings that result from automated static and dynamic assessments
+ Work directly with internal business units to communicate risks and to help ensure open vulnerabilities are resolved in a timely manner
+ Collect and analyze application security metrics
+ Provide security remediation advice and training to technical personnel
+ Assist with documenting secure coding guidelines and running training programs to assist internal development personnel
+ Provide software security support and remediation guidance to development personnel
Requirements
+ A bachelor's degree and 7+ years' experience in a development or software security / penetration testing role
+ We're looking for someone who enjoys breaking code, solving puzzles, and diagnosing problems
+ Excellent communication skills and a strong understanding of software development and application security fundamentals
+ Candidates should be interested in keeping up with the latest security trends, as well as enjoy performing code / architecture reviews and penetration test activities
+ Experience with common static and dynamic analysis tools (Semgrep, Brightsec, WAF etc.)
+ A strong understanding of security best practices in Java, JavaScript, .NET, PHP and Ruby programming languages
+ Strong understanding of common authentication models (SAML, OAuth, OpenID, etc.) is preferred
+ A software development and application security background is preferred
Morningstar is an equal opportunity employer.
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.
I10_MstarIndiaPvtLtd Morningstar India Private Ltd. (Delhi) Legal Entity
The Role: The Lead Security Analyst will assist in supporting Morningstar's application security automation program. This individual will help integrate static and dynamic security analysis tools into Morningstar's continuous integration processes, assist with security remediation activities, ensure that vulnerabilities are being remediated in a timely manner and support development and technical personnel as required. This position is based in our Mumbai location.
Responsibilities
+ Create, manage and maintain Jenkins continuous integration jobs to support application security automation
+ Administer common static and dynamic security assessment tools
+ Verify automated application security findings that result from automated static and dynamic assessments
+ Work directly with internal business units to communicate risks and to help ensure open vulnerabilities are resolved in a timely manner
+ Collect and analyze application security metrics
+ Provide security remediation advice and training to technical personnel
+ Assist with documenting secure coding guidelines and running training programs to assist internal development personnel
+ Provide software security support and remediation guidance to development personnel
Requirements
+ A bachelor's degree and 7+ years' experience in a development or software security / penetration testing role
+ We're looking for someone who enjoys breaking code, solving puzzles, and diagnosing problems
+ Excellent communication skills and a strong understanding of software development and application security fundamentals
+ Candidates should be interested in keeping up with the latest security trends, as well as enjoy performing code / architecture reviews and penetration test activities
+ Experience with common static and dynamic analysis tools (Semgrep, Brightsec, WAF etc.)
+ A strong understanding of security best practices in Java, JavaScript, .NET, PHP and Ruby programming languages
+ Strong understanding of common authentication models (SAML, OAuth, OpenID, etc.) is preferred
+ A software development and application security background is preferred
Morningstar is an equal opportunity employer.
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.
I10_MstarIndiaPvtLtd Morningstar India Private Ltd. (Delhi) Legal Entity
Top Skills
.Net
Brightsec
Java
JavaScript
Jenkins
PHP
Ruby
Semgrep
Waf
Similar Jobs at Morningstar
Artificial Intelligence • Big Data • Enterprise Web • Fintech • Software • Financial Services
Lead engineering efforts in enterprise automation for Sales and Finance technologies, build and coach teams, ensuring robust integrations and high-quality performance.
Top Skills:
AWSBillingCatalystCpqDockerErpGainsightGCPJavaKafkaKubernetesOpenapiPythonRestSalesforceSnowflakeSQLWorkato
Artificial Intelligence • Big Data • Enterprise Web • Fintech • Software • Financial Services
Lead a software engineering team, design and maintain software systems, mentor junior engineers, drive engineering decisions, and ensure high-quality deliverables.
Top Skills:
AWSCi/CdDevops PracticesJavaJava Spring Boot
Artificial Intelligence • Big Data • Enterprise Web • Fintech • Software • Financial Services
Support journalists by extracting, cleaning, and transforming investment data using Excel, SQL, and Python; build Jupyter notebooks and templates; provide ad-hoc training; collaborate with communications and internal teams to produce and distribute data-driven stories and maintain best-practice documentation.
Top Skills:
Jupyter NotebooksMorningstar DirectExcelPythonSQLVBA
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
