5+ Years of experience in working on Security aspects
Must be proficient in understanding various aspects of Application Security in a cloud
workplace and should have worked on tightening the security at all levels.
Ability to translate Information Security policies and procedures into language that a business and/or technical person can understand
Experience with vulnerability scanning tools (e.g., Qualys, Nessus, Nexpose, Saint, AWS Inspector, Kali Linux)
Experience in Mobile Application testing including iOS and Android.
Experience with web application vulnerability scanning tools (Burpsuite Pro, Veracode)
Experience with network/infrastructure-level penetration testing
Excellent communication skills to collaborate with both external and internal stakeholders to maintain the overall Information Security for KloudGin.
Must have experience on AWS landscape and understanding of security aspects related to EC2, VPC, CloudFront, WAF, Shield, Secrets Manager, Inspector, CloudTrail, CloudWatch, Systems Manager, IAM, Config, etc.
Should be aware of various CIS Benchmarks and be able to tighten the application and database servers based on the guidance.
Experience in Application security and Mobile security Including OWASP technologies, vulnerability research and Mitigation.
Awareness of CISSP certification will be a plus
AWS Certification will be a plus
Certification in any of these or similar certifications – CEH, ECSA, OSCP will be a plus.
Responsibilities
To manage the Information Security Program and IT Operations at KloudGin.
To perform web Application vulnerability scans leveraging both tools and manual checks.
To use both DAST and SAST tools to identify the vulnerabilities and work with the developers to fix and remediate the same.
To perform application security risk assessments.
To conduct penetration testing using various tools and block the exposures in coordination with the development teams.
To manage the Security features of KloudGin appli