13 Aug
|
National Institute for Smart Government (NISG)
|
Delhi
13 Aug
National Institute for Smart Government (NISG)
Delhi
Education Qualification:
B. Tech/B.E./M. Tech/MS in Computer Science/Information Technology/Cyber Security Or MCA/MSc(Compute r Science) /IT /Cyber Security
Certification:
CEH along with OSCP or Cloud security certifications equivalent.
Work Experience:
Minimum 5 years in following domains Internal, external & client-side Automation testing techniques Deep technical knowledge and hands-on skills in Application Security. Deep understanding of web application security threats, exploits, prevention (SQLi, XSS, CSRF etc). Experience with Red team exercises, threat hunting, OSINT. Knowledge of relevant data compliance standards. Experience using one or more development languages /platforms: Python, Java, JavaScript, .Net, and SQL. Familiarity with network analysis tools like Wireshark, Charles, and Nmap, TcpDump.
Familiarity with the OWASP Top 10 and hands-on experience with automated testing tools such as Burp Suite, Metasploit, Snyk, and,Nessus, Hands-on experience with cloud security configuration. Knowledge of Indian Common Criteria Certification Scheme (IC3S)
for certification for evaluation & certification of It Security Products.
Roles & Responsibilities :
Ensure Application (IT and wherever possible OT) Security for • Standalone Application, • Web based Applications • Application Programming Interfaces (APIs) • Cloud Native Applications Evaluate testing process and practices, develop and execute standard testing strategies. Conduct security architecture/design reviews to identify and fix issues in the applications and infrastructure. Review source code for potential security issues. Perform vulnerability assessment, penetration testing, and prioritize the vulnerabilities. Documentation of security findings & reporting. Perform Pen testing (both tools based as well as manual) for • Web based Applications including residing on Cloud, • HTTP based web services, microservices, REST and SOAP API. • HTTP based IoT applications and microservices. • All types of
📌 Security product testing/ application security testing (Delhi)
🏢 National Institute for Smart Government (NISG)
📍 Delhi