Role Overview:
Implement, test, and operate advanced software security techniques in compliance with the technical reference architecture.
Perform ongoing security testing and code review to improve software security. Create reports and recommendations from your findings, including the security issues uncovered and the level of risk.
Monitor for DDoS and other external attacks against internet-facing services.
Provide advice on how to minimize risks and provide advice on methods to fix or lower security risks to systems.
Present your findings, risk and conclusions to management and other relevant parties.
Assist with triage and containment of security incidents.
Investigate security breaches and other cyber security incidents.
Stay up to date on technology trends and security standards.
Consult team members on secure coding practices. Mentor and guide the team.
What will make you successful:
Minimum 3 years in a Security QA Engineer related role.
Hands-on experience in dynamic research, container testing, fuzzing, OWASP top 10, SANS/CWE top 25 and vulnerability scanning.
Should have Experience in Vulnerability Assessment and Penetration testing using industry-standard tools such as Vulnerability Scanners e.g., ZAP, Acunetix, Metaexploit, Burp Suite etc.
Working knowledge of Mobile (Android and iOS), API and Network security.
Knowledge of at least one programming or scripting language such as Python, Java, JavaScript, Shell etc.
Adequate knowledge of web-related technologies (Web applications, Web Services and
Service-Oriented Architectures) and network/web related protocols.
Strong ability to think creatively and strategically to penetrate security systems.
Experience in Security standard methodologies & regulations
--
You must verify your mobile number to apply to this job.