Security Testing Engineer

Security Testing Engineer

Company:

Work Mode:

Interview Mode:

Security Testing Engineer

Direct Responsibilities:

• Perform

  Penetration testing

  (Gray Box and/or Black Box) for Web applications, Thick Client, API, and mobile applications.
• Demonstrate deep knowledge of

  application security engineering principles

  to follow secure development practices, including secure build processes, secure code review, and security testing.
• Understand the integration and use of

  security tools within DevOps Processes

  .
• Possess knowledge of one or more

  scripting languages for automation

  .
• Collaborate effectively with developers to help them understand and remediate reported vulnerabilities in applications.

Contributing Responsibilities:

• Understand application security requirements and identify & document the scope of security tests.
• Ensure the thorough execution of documented security scenarios for the application under test.
• Document and report all findings clearly and comprehensively.
• Escalate issues to local management and onshore stakeholders if they affect testing progress.
• Ensure adherence to defined processes for security assessments.
• Help review peers work and mentor junior members of the team.

Technical & Behavioral Competencies:

• Clear understanding of

  OWASP Top 10

  application security risks.
• Proficiency with security tools/OS such as

  Burp Suite, OWASP ZAP, and Kali Linux

  .
• Strong skills in

  Manual Security Testing & Analysis

  and

  Security Test Designing

  .
• Excellent interpersonal and presentation skills.
• Strong verbal and written communication abilities.
• Good analytical skills.
• Strong time management capabilities.
• Must be flexible, independent, self-motivated, and a team player.