Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Penetraion Tester @ IBM

Home > Quality Assurance and Testing

 Penetraion Tester

Job Description


 Your Role and Responsibilities Infra Security Center is responsible for ensuring that IBM products are secure by conducting timely Security reviews, penetration testing and following SPbD practices. As a penetration tester you will perform security testing of IBM product (Cloud/on prim) offerings in development and production environment. You will also closely work with IBM product development teams to strengthen the security posture of their products by participating in threat model, source code security testing and share best practices / lessons learnt for secure coding/design. Key responsibilities 
  • Plan the penetration test
  • Select, design and create appropriate tools for testing
  • Perform the penetration test on computer systems, networks, web-based and mobile applications
  • Document your methodologies, findings
  • Gather the data intelligence not only from the output of the automated penetration tools but also from information gathered from interaction with product teams , previous results , threat model and source code scanning inputs.
  • Review your findings and feedback to development teams
  • Analyse the outcomes and make recommendations for security improvements
  • Carry out application, network, systems and infrastructure penetration tests
  • Review physical security and perform social engineering tests where appropriate
  • Evaluate and select from a range of penetration testing tools
  • Keep up to date with latest testing and ethical hacking methods
  • Deploy the testing methodology and collect data
  • Report on findings to a range of stakeholders
  • Make suggestions for security improvements
  • Enhance existing methodology material
    • Required education
    Bachelor's Degree Preferred education
    Bachelor's Degree Required technical and professional expertise
     Required Professional and Technical Expertise 
  • Experience More than 1-2 years in Cybersecurity
  • Web Application Testing
  • Basic understanding of HTTP Protocol
  • HTTP Methods, Request/Response Headers, Cookies, TCP/IP connections over HTTP etc.
  • Basic understanding of HTML/JavaScript
  • Good Understanding of security vulnerabilities, OWASP Top 10 vulnerabilities
  • Basic understanding of storage domain

    • Automated Testing
  • Must have knowledge of at least one of ZAP OR BurpSuite scanner. (Good to have knowledge of both the tools.)
  • Should be able to configure automated scanner (such as Login sequence, manually exploring critical flaws, Policy customization, scan throttling, etc) to perform successful scan.
  • Assessment of scanner results and intelligently identifying false positives from the scan results.
  • Knowledge of Burp features mainly, Spider, Intruder, Scanner, Repeater and Extender.

    • Manual Testing.
  • Should be able to understand the above mentioned OWASP Top 10 categories to perform manual testing.
  • Flaws like, Authentication (session management) testing, CSRF, business logic testing which are not detected by an automated scanner must be identified using manual testing.
  • Understanding of the workflow of the application and identifying the entry points to detect possible vulnerabilities.

    • Job Classification

    Industry: IT Services & Consulting
    Functional Area / Department: Engineering - Software & QA
    Role Category: Quality Assurance and Testing
    Role: Game Tester
    Employement Type: Full time

    Contact Details:

    Company: IBM
    Location(s): Pune

    + View Contact

    Keyskills:   http security testing product development physical security manual testing penetration testing ethical hacking

     Fraud Alert to job seekers!

    ₹ Not Disclosed

    Similar positions

    Labware LIMS Tester

    • Cognizant
    • 5 - 10 years
    • Hyderabad
    • 9 days ago
    ₹ Not Disclosed

    Sap Automation Tester

    • HCLTech
    • 3 - 5 years
    • Hyderabad
    • 12 days ago
    ₹ -9.5 Lacs P.A.

    Api Automation Tester

    • Hexaware Technologies
    • 9 - 12 years
    • Hyderabad
    • 18 days ago
    ₹ Not Disclosed

    Immediate Hiring For the Position of Embedded/Firmware/IoT testers

    • ACL Digital
    • 4 - 9 years
    • Pune
    • 19 hours ago
    ₹ Not Disclosed

    IBM

    At Accelalpha, an IBM Company, we are experts at implementing, integrating, and managing Oracle Cloud Applications. We help to solve business problems with supply chain and logistics processes, procurement, customers experience when they buy, and enterprise-wide financial planning and reporting. We ...

    IndigoJobs.in © 2025

    For enquiries: contact(at)indigojobs.in

    We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in