Application Security Test Analyst

As a Security Testing professional at Lexmark India, Kolkata, you will be responsible for conducting web application security assessments and penetration tests. Your tasks will include assessing applications for issues surrounding Authentication, Authorization, User management, Session management, Data validation, and common attacks like SQL injection, Cross-site scripting, Command injection, among others. Additionally, you will assess the security aspects of Web Services design and implementation, write formal security assessment reports, participate in client conference calls, and perform vulnerability and network penetration assessments. You will also be involved in mobile applications security testing, publishing whitepapers, tools, and delivering presentations. Cloud application security testing will also be part of your responsibilities. **Key Responsibilities:** - Conduct web application security assessments and penetration tests. - Assess applications for various security issues. - Evaluate the security aspects of Web Services design and implementation. - Perform thick client assessment. - Write formal security assessment reports. - Participate in client conference calls. - Perform vulnerability and network penetration assessments. - Conduct mobile applications security testing. - Publish whitepapers, tools, and deliver presentations. - Carry out cloud application security testing. **Qualifications Required:** - B.E./B.Tech. or higher from a reputed Engineering College/University. - 3 to 5 years of hands-on application security testing experience. - Knowledge of tools such as Fiddler, Paros, Burp, Sqlmap, Nikto, Nmap, Openssl, Mallory, Wireshark. - Mobile application development and assessment experience. - Web application development experience in languages like C#, Java, PHP, ASP.NET. - Familiarity with scripting languages like Python, JavaScript, Ruby, SQL. - Experience in reviewing code in C, C++, Java, PHP, C#, ASP.NET, Go. - Familiarity with automated source code analysis tools like Acunetix, Appscan. - Certifications such as OSCP or CEH. - Working knowledge of version control software like git and Subversion. - Demonstrate Lexmark core values: Innovation, Excellence, Agility, Integrity, Community, and Respect. If you are a self-starter with analytical skills and a passion for technology, and have prior experience in an agile/scrum environment, you are encouraged to apply for this role at Lexmark India.,