You will be required to Analysis and identify future requirements on three projects

Skills Required:

• Analysis and requirements to identify for future implementation:
• A cloud web application firewall (WAF) for external assets (websites/web apps);
• Integration of WAF alerts into existing detection and incident response processes;
• Provide a blueprint / process for future WAF integrations for other sites / web apps
• HTTPS/Encryption of all communications (source control, file transfer, SQL connections, everything, etc), 
• Identify Integrated Authentication for all MSSQL connections, Server DB access via a specific Service Account or SQL account
• Identify unneeded privileges from service accounts, database "write' permissions for migration from bitbucket to the Github.
• Requirements and plan for delivery of enhancements distributed via HTTPS, Software centre or SCCM, with integration for Auto-Updating, Clients 
• Implementation for a baseline application security testing (AST) capability comprising Static Application Security Testing (SAST) and Software Composition Analysis (SCA)
• Identify integration of AST capability into the development workflow (20 key applications e.g. IDP, Momentum, OC apps etc.)
• Requirements to develop an application security standard (secure development lifecycle) which mandates the use of AST where applicable based on risk
• Requirements and analysis of developing a set of tracking metrics for monitoring adoption and application security risk reduction.