Job Purpose
Discover and Mitigate Cyber Risks and exploitable vulnerabilities on the internet facing apps/assets.
Conduct Regular Vulnerability Assessment and Penetration Testing of the applications
Experience with latest technologies and security standards such as OWASP, CVSS, Mitre etc.
Mobile App Reversing and pen testing as Android and iOS applications security standards
Familiarity with malicious code identification and common hacker attack techniques
Conduct regular Secure Code and Architecture Review, SAST and DAST
Latest technology security API, Microservices, RPA, IOT etc.
Ethical Hacking and Red Teaming Activity
Assess Third Party Partner vulnerabilities and security risk
Remediations, Closures Tracking, Reporting and Management of all Cyber Risks
Engage with technology Teams and partners and business units to resolve identified vulnerabilities within acceptable timelines
Design and deliver actionable Information Security dashboards and scorecards
Work with partners in carrying out comprehensive VAPT assessment
Advanced understanding with working experience collecting and tracking threat intelligence
Experience working with tracking, communicating, and prioritizing vulnerabilities and cyber threats to an enterprise-wide organization
Duties and Responsibilities
A-Minimum required Accountabilities for this role
Engineering / Computer Graduate with 3-5 years of Information / Cyber Security Experience
B-Additional Accountabilities pertaining to the role
Relevant Security Certifications like CEH, CPENT, PNPT, EJPT, EWPT, EMAPT etc. preferred (Good to Have)
Key Decisions / Dimensions
Activity calendar planning
Security Audits preparedness
Preparation of testcases for infosec sign-offs
Major Challenges
Timely vulnerability closure
Change management infosec sign off with in defined TAT
Required Qualifications and Experience
a)Qualifications
Post-Graduates with relevant security experience of 4-6 years (also graduates with experience of 6-8 years may apply)
b)Work Experience
Engineering / Computer Graduate with 4-6 years of Information / Cyber Security Experience
Relevant Security Certifications like CEH, CPENT, PNPT, EJPT, EWPT, EMAPT etc. preferred (Good to Have)
Prior experience of Security Testing, OWASP Top 10 and application security
Prior experience of Payment Testing, Mobile Applications and API Security testing
Sound in latest application technologies and network attacks execution
Good Written and Verbal Communication with Presentation Skills
Good Team Player and sound in stakeholder management
Threat Modelling, Cloud Security and WAF basics clarity
DevOps / DevSecOps and Source Code security review experience is added boon
Well versed with related tools and techniques of all the aboveSourced from naukri
