- Conduct penetration testing for thin & thick client based applications
- Identify and propose work-around for critical defects.
- Should be able to deal with multiple platforms like Windows, Linux and technologies like Java, .Net
- Conduct Threat Modeling of Applications
- Ability to analyze root causes and deliver strategic recommendations during security reviews
- Conduct Security Code Review, Penetration Testing and Consult Product Development Team to
secure Financial and Telecom Applications
- Being a key team member for delivering complete project life cycles - from capturing Customer requirements to delivering timely solutions to Customers
- Adhering to best practices, and alignment with the Customer’s security requirements for project execution, documentation, and reporting
- Interaction with multi-disciplinary teams for timely meeting of key project milestones and checkpoints
- Manage Customer relationships at the project delivery level
Desired Profile:
- Candidate should be Graduate / Post Graduate with a strong hold on the Java, .Net, PHP based
web technologies
- Sound understanding of all security related fundamentals
- Prior Development Experience will be an advantage
- Should be familiar with OWASP, OSSTMM etc.
- Hands on Experience on tools like Fortify, IBM AppScan etc.
- Proven experience of security code review and penetration testing Java and .Net Technologies
- Understanding of managed services business and the significance of SLAs SOPs, periodic reporting and escalation matrices
- Relevant certifications (CEH/CSSLP/CISSP) will be an added advantage
- Keen market awareness in terms of upcoming technologies, vendor offerings, and competitors
is highly desirable
- Rich script development in Perl/Ruby/Php/Python will be an advantage
- Excellent time management and prioritization skills
- Should possess positive Interpersonal & Communication skills