The Security Testing Engineer will be responsible for executing end-to-end security testing assignments, including vulnerability assessment, penetration testing, secure code reviews, and configuration assessments across systems, networks, web, mobile, and cloud environments. The role demands a blend of strong technical expertise, analytical thinking, and effective communication to ensure timely and high-quality delivery of security testing services to clients.
Major Objectives of the Job:
1. Security Testing Service Delivery
- Conduct Vulnerability Assessment and Penetration Testing (VA/PT) across systems, networks, web, and mobile applications.
- Perform Secure Code Review using SAST and DAST methodologies.
- Execute Secure Configuration Reviews for both cloud and on-premise environments.
- Review and validate technical findings, test plans, test cases, and final reports for accuracy and completeness.
- Ensure timely delivery and distribution of detailed security testing reports.
- Provide actionable recommendations and remediation guidance to customers.
- Address and resolve client issues and escalations effectively.
2. Quality and Efficiency
- Maintain accuracy in defining project scope and deliverables.
- Uphold the quality of testing processes and reporting standards.
- Communicate findings and technical insights clearly in both oral and written forms.
- Ensure on-time project delivery and high client satisfaction.
- Achieve a high rate of client issue resolution.
3. Security Testing Process Efficiency
- Develop and adhere to standardized testing processes.
- Build and utilize automation frameworks and tools to enhance testing efficiency.
- Create and maintain scripts for repetitive testing tasks.
- Continuously improve average testing time per target through optimized workflows.
4. Continuous Improvement & Innovation
- Contribute creative ideas and approaches to improve security testing methodologies.
- Stay updated with the latest tools,