Senior Tech Lead Information Security Engineer- Assessment
Type of hiring: Permanent
Number of openings: 2
Work Location: Bangalore
Designation: Information Security Engineer
Temporary accommodation provided for outstation candidate
Mandatory skills:
Network, Web application, and mobile Application VAPT, MANUAL
TESTING, not tool based; communication skills,
Optional skills: Secure Code Review
Job Description
Perform Network, web application, and mobile penetration testing
Hands-on experience with manual testing and validation of the identified vulnerabilities
Prepare reports documenting identified issues with business risks and detailed proof of concept
Interact with clients to deliver results, provide feedback and remediation on findings
Work on improvements for provided security services, including the continuous enhancement of existing methodology, material, and supporting assets
Technical Skills
Good Knowledge and experience in conducting vulnerability assessments and penetration testing (VAPT) of networks, web applications, mobile apps as per standards such as PTES, OWASP Top 10, SANS/CWE Top 25, NIST.
Ability to analyze web applications, mobile applications, source code review, workflows, and perform manual testing.
Analyze application security vulnerabilities found through testing and collaborate with the development and other internal technical teams to provide mitigation steps to reduce the risk.
Familiarity with Secure SDLC is a plus
Should have hands-on experience with at least one programming/scripting language from PHP, C#, ASP .Net, Java, Python, Ruby, Java-scripting
Should be strong in basic concepts in networking and operating systems such as Windows and Linux.
If interested, kindly acknowledge this email with an updated resume copy for further process.
