• Project Role :Security Engineer
• Project Role Description :Apply security skills to design, build and protect enterprise systems, applications, data, assets, and people. Provide services to safeguard information, infrastructures, applications, and business processes against cyber threats.
• Management Level :10
• Work Experience :4-6 years
• Work location :Bengaluru

Job Requirements :

• Key Responsibilities : a.Experience in web application security assessments, hands on techniques for identifying SQL injections, XSS, CSRF, authentication, OWASP top 10 issues. b.Good knowledge of security technologies for secure software development such as cryptography, authentication techniques and protocols etc. c.Experience on both commercial and open source tools ( Cenzic Hailstorm, Burpsuite, AppScan, WebInspect, Appspider, sqlmap, OWASP ZAP,) d.3Proven experience in identifying and exploiting business logic and framework related vulnerabilities. e.Vast experience in removing false positives, analyzing dynamic scan (webinspect, appscan) reports f.Knowledge of Secure SDLC and Security standards like OWASP, CWE, NIST, OSSTMM. g.Provide expert advice and recommendation to application development team as well as vendor.
• Technical Experience : Experience in performing penetration testing on enterprise networks, web applications, APIs and mobile applications. Familiarity with common web vulnerabilities including XSS, XXE, SQL Injection, Deserialization Attacks, File Inclusion/Path Traversal Attacks, Server-side Request Forgery, Remote Execution Flaws, Server Configuration Flaws and Authentication Flaws. Experience in testing web-based APIs (REST, SOAP, XML, JSON). Experience in designing and documenting pragmatic remediation guidance for discovered vulnerabilities. Experience in performing Reverse Engineering for APIs and mobile applications. Experience developing actionable intelligence based on open-source intelligence (OSINT) gathering. Experience with 1 or more scripting languages such as Bash, Python, Perl, PowerShell. Experience on both commercial and open-source tools such as Kali Linux, Metasploit, Burpsuite, AppScan, WebInspect, Appspider, sqlmap, OWASP ZAP and others.
• Professional Attributes : Strong analytical skill with a structured problem-solving approach Must have good verbal and written communication skill and a good team player Demonstrated creativity in complex problem solving and ability to work under pressure
• Educational Qualification : BE/BTech
• Additional Information : Certified in one of the Industry recognized penetration testing skill (OSCP, LPT, Comptia Pen test+, GPEN, GXPN)