20 Aug
|
Principal Financial Group
|
Hyderabad
20 Aug
Principal Financial Group
Hyderabad
Responsibilities
Unique Opportunity
At Principal, we believe in encouraging innovation and excellence. As a Consultant - Info Security Engineer, you will have the outstanding opportunity to collaborate with world-class professionals in Hyderabad, Telangana, India. You'll play a crucial role in ensuring the security and integrity of our applications, both on-premises and in the cloud, by performing security penetration testing. This position is for those who are ambitious and determined to make a significant impact in the field of information security.
Key Responsibilities
Perform manual security penetration assessments of web applications and APIs hosted within on-premises infrastructure.
Conduct security assessments on web applications and APIs deployed in cloud environments using AWS services such as S3 buckets, EC2 instances, Lambda functions, API Gateway, and SNS.
Apply re-engineering techniques using tools like Echo Mirage, IDAPro, CFF Explorer, Dnspy, MS sys-internals, Wireshark, dotpeek, and ghidra for thick client/desktop applications.
Manage Vulnerability Disclosure Program (VDP) and Bug Bounty reports with detailed technical validation, consistent assessment of impact and severity, and fair evaluation aligned with policies.
Use CVSS scoring mechanisms to assess risk levels of identified vulnerabilities.
Innovatively identify techniques to exploit vulnerabilities in applications, generate impactful proof-of-concepts (POCs), provide walkthroughs to app-dev teams, and offer remediation mentorship.
Write comprehensive reports and update existing documentation.
Work independently and multi-functionally, mentoring peers and junior team members, helping them learn and apply new attack techniques during security testing.
Qualifications
Qualifications
Bachelor’s or Master’s degree in Computer Science, Technology, Engineering, Mathematics, or related fields, or equivalent skilled experience (B.E. / B.Tech / M.S. / M.Tech / MCA).
8-10 years of practical e
📌 Consultant - Info Security Engineer (Hyderabad)
🏢 Principal Financial Group
📍 Hyderabad