Your Key Responsibilities
Minimum 3 years of experience in Application security.
Perform security assessment of web applications, Android, iOS mobile applications
Good knowledge of security frameworks, secure coding practices, information security principles, Threat Modelling
Must have Knowledge of the most common implementations of the Threats in application security (e.g. XSS, SQL Injection, XSRF, buffer overruns,business logics, brute force, etc) and how they match the general classification
Familiarity with the tools for various security activities: Static Code Analysis, DAST Penetration Testing, Intrusion Detection/Prevention, etc.
Proactively identify vulnerabilities across our platform and recommend fixes
Ownership of the tasks
Able to automate security activities
Adapt to technologies/languages/platforms/frameworks of the time
Promote the culture of security first at Pharmeasy
Identifying the problem statements which upon solving will increase the security posture of Pharmeasy
What To Bring
In-depth knowledge of security vulnerabilities not just limited to OWASP Top 10
Experience in doing security assessments on web applications, Android and iOS mobile applications in microservice architecture
Experience in using the security tools to carry out the manual as well as automated security assessments.
Experience working with common product flows like Authentication, payment gateway integration, Business logics etc.
Driving Security in SDLC
Valuable understanding of AWS and GCP Cloud Platform
Passion for security, and a practical and balanced approach to security issues.
Independent, self-motivated and comfortable working in a rapid-paced environment
Certifications (Valuable to have)
1. EC council - Certified Ethical Hacker (CEH)
2. Comptia security+
3. (ISC)2 Certified Information Systems Security Professional (CISSP)
4. Any other relevant security certifications