Cyber security Engineer- Threat modelling | Immediate

Role:

Skills:

Experience

Notice period:

Location: Bangalore

Roles and Responsibilities

• Proven work experience as a security engineer/working knowledge in implementing cybersecurity in application or product development.
• Strong understanding of network and web related protocols such as TCP/IP, UDP, IPSEC, HTTP, and HTTPS protocols.
• Detailed technical knowledge of the OWASP Top 10 Risks, and how to mitigate them.
• Strong knowledge in manual and tool-based penetration testing, as well as vulnerability analysis and assessment along with risk scoring frameworks such as CVSS.
• Strong understanding of industry standard tools and technology used for application security such as Burp Suite, ZAP Proxy, Metasploit, Wireshark, SonarQube, Blackduck, and common Kali Linux tools.
• Strong knowledge of Secure Development Lifecycle procedures including threat modeling, security requirements analysis, security testing, vulnerability management etc.
• Good understanding of OOPS concepts.
• Basic understanding of software development and the secure development lifecycle in any one of the following core languages: .NET C#, C++, Python.
• Strong understanding of various security controls such as data encryption, obfuscation, rate limiters, firewalls, and concepts such as defense in depth, zero trust architecture etc.
• Adequate knowledge of web related technologies (Web applications, Web Services and Service Oriented Architectures) and of network/web related protocols.
• Experience working in an Agile development environment and communicating the value of security to developers or other engineers.
• Experience planning, researching, and developing security policies, standards and procedures.
• Interest in all aspects of security research and development.

Interested candidates kindly share your resume at [HIDDEN TEXT]