Product Security Specialist

Job Posting Description

Job title: Product Security Specialist
u00A0

Your role:

This is an individual contributor role. As part of the larger Security and Privacy team, the Application Security Engineer would -

u00A0

u00B7u00A0u00A0u00A0u00A0u00A0u00A0 Perform comprehensive Dynamic Application security Testing (DAST)

u00B7u00A0u00A0u00A0u00A0u00A0u00A0 Understand and analyze the applications from security point of view.

u00B7u00A0u00A0u00A0u00A0u00A0u00A0 Understand the application security risks and Threat modeling of applications

u00B7u00A0u00A0u00A0u00A0u00A0u00A0 Create and execute the corresponding security test cases to verify that the mitigations are properly implemented in the application.

u00B7u00A0u00A0u00A0u00A0u00A0u00A0 Able to guide and support development teams to fix the security vulnerabilities in the code.

You're the right fit if :u00A0

u00B7u00A0 4 yearsu00A0of experience in Application Security Testing and VAPT

u00B7u00A0 Must have experience in Hardware/ IoT penetration testing.

u00B7u00A0 Familiarity with code review methods and standards

u00B7u00A0 Knowledge of OWASP standardsu00A0and OSSTMM methodologies

u00B7u00A0 Proficient with tools like HP WebInspect, IBM AppScan, Acunetix, and open-source tools (e.g., Burp Suite, OWASP ZAP, CSRF Tester)

u00B7u00A0 Background in application development

u00B7u00A0 Pythonu00A0experience for security automation is a plus

u00B7u00A0 Research and pilot new technologies for secure software development

u00B7u00A0 Familiarity with cloud technologiesu00A0like AWSu00A0and Azureu00A0is advantageous.

Educational Qualifications:

u00B7u00A0u00A0u00A0u00A0u00A0u00A0 Bachelor degree with concentration in Computer Science, Information Systems, Information Security or similar would be preferred.

Preferred Security certifications

Ideally, candidate will possess any one of the below Security certifications(but not mandatory)

u00B7u00A0u00A0u00A0u00A0u00A0u00A0 CEH

u00B7u00A0u00A0u00A0u00A0u00A0u00A0 ECSA

u00B7u00A0u00A0u00A0u00A0u00A0u00A0 LPT

u00B7u00A0u00A0u00A0u00A0u00A0u00A0 OSCP