Security Testing Engineer

Role & responsibilities

Exp : 4 to 6 years

Location: BNG/ HYD

NP: immediate to 30 Days

Certification Required: CEH(Mandatory)

Description:

• Participate in requirement gathering calls & Understand the NFRs/Security testing requirements. Understand the System Architecture and the components involved in the applications.
• Should be able to conduct POC for new tools and technologies
• Prepare and present the test plan with suggestion on types of testing needed to for the application
• Create test cases from security testing services
• Develop capability to conduct manual code review and become proficient in Chekmarx tool.
• Develop capability to conduct manual penetration testing using Burp Suite and Zap-proxy tools and be proficient with OWASP top 10 web, API and Mobile pen testing
• Develop capability to conduct vulnerability scanning and management, ability to lead the project and coordinate with other teams and prepare assessment for remediations
• Develop capability to conduct security audits and through understanding on NIST controls
• Develop capability to conduct security testing practice for cloud related technologies
• Develop capability to automate security testing services using SSDLC, CI-CD integration and Dev-Sec-Ops
• Develop capability to identify false positives and prepare detailed report with number of vulnerabilities and provide proper recommendations to client
• Be responsible and take ownership for the work assigned and complete the activity on time without follow-ups
• Take ownership for end to end delivery of the project, including daily updates, weekly updates and reports walkthrough for the clients
• Demonstrate ability to handle multiple projects at the same time