Product Security Engineer

Responsibilities:

Knowledge of various security assessments, vulnerability assessments and penetration tests on a wide variety of high critical web applications.

Understanding of SAST, DAST, ability to analyze security issues and suggest remediations.

Perform web services and API security assessments, Analysis and assessments of Identity and Token authentication and authorization mechanisms.

Analysis and assessment of cryptography implementations and key management and rotation

Ability to deep dive under an existing implementation and assess it thoroughly

Requirements:

Thorough understanding of HTTPS, TLS 1.2, TLS 1.3 and public+symmetric key cryptography Knowledge of various security tools like Burp suite, Nmap, ZAP, Blackduck Hub, NVD and CVE/CWEs

Knowledge of secure implementations on Cloud.

Mandatory skills -:

should have SAST DAST,

should have experience in giving assessments (specifically vulnerability test)

Burp suite

ocation: Bangalore

Experience: 2 to 12 Years

Round of interview - Online assessment / Technical round / Manager