Cybersecurity Expert-Pentest
- Orange Business
- 5 - 9 years
- Noida, Gurugram
- 1 year ago
- Email to a friend
- Report this job
Job Description
about the role
Key Responsibilities
Performing (Web, mobile, Cloud-based AWS, Azure, etc.), thick-clients business solutions and infrastructure pentest as assigned by the customer
Work on full assessment & revalidation cases within customer defined timelines.
Handling report creation based on pentest outcome as per customer template
Develop new test cases, scenario & able to perform API pentesting
Develops, tests and validates solutions to remediate exploitable conditions on devices such as web servers, mail servers, routers, firewalls and intrusion detection systems |
Provide results report and help team to evaluates, codes and implements software fixes (patches) to address system vulnerabilities such as malicious code (e.g., viruses), system exploitation using SQL injection, cross-site scripting, buffer overflows, parameter tampering, hidden field manipulation, cookie poisoning and web services manipulation |
Conducts security assessments of systems and applications using penetration tests, ethical hacking tools and risk assessment/mediation methodologies to evaluate vulnerabilities
Perform source code review & configurations reviews against CIS benchmarks and security standards
Participating in end user calls with customer for requirement gathering, explanation of findings, technical discussions
about you
education, qualifications, and certifications
- Degree / Diploma Holders with good knowledge in pentest domain.
- Excellent verbal & written communication skills in English language
Mandatory skill set
- Proficiency in Pentest tool such as using Burp suite and Kali Linux
- Proficiency in Python and Java, JavaScript, and Other coding languages
- Good experience in performing security penetration testing and vulnerability assessment for
- Experience in testing diverse infra components including various enterprise platforms such as private clouds, Openshift infra, dockers/container infra etc.
- Experience in Source code reviews, red team exercises, security architecture configuration reviews, and technical security compliance reviews
- Knowledge on Web-based applications and services (SOAP/REST)
- Well versed in writing reports, test cases etc.
- / OSWP / OSCE certification (preferred), SANS or Certified Penetration Tester, Certified Expert Penetration Tester or GIAC Certified Penetration Tester
Secondary skill set
- Knowledge on Azure & scripting language
- Nice to have knowledge on other hacker tools;Appscan, Fortify, Wireshark, nmap, netcat, ZAP, FireBug, Nessus, John the Ripper
department
Global Delivery & Operations
Orange Business manages and integrates the complexity of international communications, freeing our customers to focus on the strategic initiatives that drive their business. Our extensive experience and knowledge in global communication solutions, together with our understanding of multinational business and local support in 166 countries and territories, ensure that our customers receive a consistent, global solution wherever they do business.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: Engineering - Software & QARole Category: Software DevelopmentRole: Technical ArchitectEmployement Type: Full timeContact Details:
Company: Orange BusinessLocation(s): Noida, Gurugram
Keyskills: Linux Coding Javascript Test cases Business solutions Vulnerability assessment Testing SQL Python Penetration testing
Similar positions
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in