Job Purpose
• Discover and Mitigate Cyber Risks and exploitable vulnerabilities on the internet facing apps/assets.
• Conduct Regular Vulnerability Assessment and Penetration Testing of the applications
• Experience with latest technologies and security standards such as OWASP, CVSS, Mitre etc.
• Mobile App Reversing and pen testing as Android and iOS applications security standards
• Familiarity with malicious code identification and common hacker attack techniques
• Conduct regular Secure Code and Architecture Review, SAST and DAST
• Latest technology security – API, Microservices, RPA, IOT etc.
• Ethical Hacking and Red Teaming Activity
• Assess Third Party Partner vulnerabilities and security risk
• Remediations, Closures Tracking, Reporting and Management of all Cyber Risks
• Engage with technology Teams and partners and business units to resolve identified vulnerabilities within acceptable timelines
• Design and deliver actionable Information Security dashboards and scorecards
• Work with partners in carrying out comprehensive VAPT assessment
• Advanced understanding with working experience collecting and tracking threat intelligence
• Experience working with tracking, communicating, and prioritizing vulnerabilities and cyber threats to an enterprise-wide organization
Duties and Responsibilities
A- Minimum required Accountabilities for this role
• Engineering / Computer Graduate with 3-5 years of Information / Cyber Security Experience
B- Additional Accountabilities pertaining to the role
• Relevant Security Certifications like CEH, CPENT, PNPT, EJPT, EWPT, EMAPT etc. preferred (Good to Have)
Key Decisions / Dimensions
• Activity calendar planning
• Security Audits preparedness
• Preparation of testcases for infosec sign-offs
Major Challenges
• Timely vulnerability closure
• Change management infosec sign off with in defined TAT
Required Qualifications and Experience
a) Qualifications
• Post-Graduates with relevant security experience of 4-6 years (also graduates with experience of 6-8 years may apply)
b) Work Experience
• Engineering / Computer Graduate with 4-6 years of Information / Cyber Security Experience
• Relevant Security Certifications like CEH, CPENT, PNPT, EJPT, EWPT, EMAPT etc. preferred (Good to Have)
• Prior experience of Security Testing, OWASP Top 10 and application security
• Prior experience of Payment Testing, Mobile Applications and API Security testing
• Sound in latest application technologies and network attacks execution
• Good Written and Verbal Communication with Presentation Skills
• Positive Team Player and sound in stakeholder management
• Threat Modelling, Cloud Security and WAF basics clarity
• DevOps / DevSecOps and Source Code security review experience is added boon
• Well versed with related tools and techniques of all the above