Manager Application Security
- Netcracker
- 10 - 15 years
- Pune
- 6 months ago
- Email to a friend
- Report this job
Job Description
- At least 7 year of experience as a penetration tester
- Proven abilities to approach a black box and white box testing.
- Proven hands on experience in manual pen testing as major part of work profile
- Hands-on experience with vulnerability scanners (static and/or dynamic) and frameworks, including but not limited to Burp Suite, Checkmark, OWASP ZAP, Burp, Nmap, Nessus, Metasploit Framework
- Good hands on experience with API penetration testing of Rest/SOAP based interfaces
- Perfect knowledge of OWASP methodology and web vulnerabilities you can easily explain and show how it works
- Python or any other scripting language. Comfortable using and working linux/unix environments
- Desirable skills to have PCI, NIST guidelines including PII, ISO2700x, cloud security, virtualization, SecDevOps, containerized deployment.
- Extremely committed and self-motivated individual with ability to deliver in challenging situations
- Excellent written and oral communication
- Assessing application and solution security controls against black box, grey box and white box attacks using both manual and automated (DAST) penetration techniques
- Assessment of penetration test results with development teams, contribution to risk mitigation actions
- Source code analysis (client/server/database) for vulnerabilities with scanning tools - SAST
Roles and Responsibilities
- Discovering all information on system and solution exploitability ( of Top 10 vulnerabilities categorized by OWASP, CWE/CVE like XSS, CSRF, CRLF, SQLi, XXE and uncommon HTTP Request Smuggling/Splitting, other) and security weaknesses from a variety of sources ( technical documentation, source code, communication with project and development teams)
- Assessing application and solution security controls against black box, grey box and white box attacks using both manual and automated (DAST) penetration techniques
- Assessment of penetration test results with development teams, contribution to risk mitigation actions
- Source code analysis (client/server/database) for vulnerabilities with scanning tools - SAST
- Analysis of customer and 3rd party penetration test results and communicating security results to the customer
- Vulnerability assessment using various commercial and open source tool
- Software Composition Analysis of product open source libraries using various tools
- Contribution in enhancing penetration testing process, tools and automation of SAST/DAST tools in CI/CD pipelines
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Application Security EngineerEmployement Type: Full timeContact Details:
Company: NetcrackerLocation(s): Pune
Keyskills: continuous integration cd rest python burp suite android testing web application owasp ci/cd nessus dast framework metasploit application security mobile application testing white box testing linux writing sast web application security nmap soap unix communication skills
Similar positions
Netcracker
\\n\\nRivera Manpower Services, a renowned manpower consultancy, excels in talent solutions for IT and non-IT sectors. Over the past ten years, we have partnered with organizations to streamline recruitment, delivering top-notch professionals for specialized positions. We are a Top Choice for Bespok...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in