1) Implement best testing and DevOps practices.
2) Application assessment(manual and automation) and further evolution on continuous basis, 3) Design/Architect test automation framework and develop the new test automation libraries for application testing and security assessment. 4) Collaborate with the teams to discuss, analyze requirements and put low level design 5) Perform code reviews on regular basis 6) Assist team in development of any testing tool for application and its security testing on need basis 7) Collaborate with the team/Project Manager/Scrum Master and Business Analyst to develop effective strategies for testing framework, plans and necessary roadmap. 8) Post application security testing a remediation support, review open source components 9) Reviewing application code against the secure coding baseline and practices including top rated OWASP global issues. 10) Executing test cases (manual or automated) and analyze results 11) Create logs to document testing phases and defects, reporting and tracking till closure of reported issues. 12) Report bugs and errors to development teams including conduct regression testing to sign-off deliverables 13) Conduct post-release/ post-implementation testing including test plan for every version change with impact & risk assessment 14) Work with cross-functional teams to ensure quality throughout the software development lifecycle 15) Need to mentor team about preparation of test cases as required and have good understanding of test life cycle 16) Participate in various application security assessments, build and improve application security framework, and coordinate with IV&V agencies. Identify, classify and find remedy for security non-compliances.
Experience:
1) Candidate should have minimum 10+ years of experience in application testing, security testing or Security Architecture - Mandatory
2) Proven experience as a Software Quality Assurance Tester or similar role - Mandatory 3) Familiarity with Agile frameworks and regression testing is a plus - Added advantage 4) Ability to document and troubleshoot errors 5) Knowledge in Payments Systems - Added advantage 6) Knowledge in Banking domain - Added advantage 7) Excellent communication skills with Analytical mind and problem-solving aptitude 8) Good communication skills, email etiquettes, with ability to work in all shifts (24/7)
Knowledge:
Good understanding of the SDLC and STLC
Experience in Manual & Automation Testing Understanding of Payment System business, and Scope of security testing within various applications Good knowledge in Testing and Security tools like Burp Suite Good knowledge in Session Management, Authentication, Authorization, Access control, Input Validation, Business logic security testing, Webservices/API security testing Extensive knowledge of OWASP top 10 vulnerabilities Self-driven and ability to work independently with minimal supervision Knowledge of various types of security vulnerabilities Working knowledge in Agile environment Strong written and verbal communication
Skills:
Web technologies such as HTML, httpd, Javascript, AJAX, JSON, XML, and DOM
API, any IDE, Restful services, Opensource technologies
Leading the team in designing QA test procedures.
Implementing testing procedures and overseeing the QA process. Troubleshooting quality issues and modifying test procedures. Conducting analysis checks on product specifications. Reviewing Quality Assurance reports. Ensuring the successful deployment of the packages into the respective environments Designing test plans, scenarios, scripts, and procedures. Executing tests Analyzing test results and reporting to the development team Creating an automation test plan and Identifying/selecting the automation test cases Configuring Test automation tools Hands on knowledge of Selenium Environment Setup with an Integrated Development Environment (IDE), Burp Suite or security tools Automating the design of a framework and implementing it as per the structure of the project Creating, enhancing, debugging, and running the test cases Collating and monitoring the defect management process Managing the changes and executing regression tests Coming up with exact solutions for problems related to object identity and error handling