22 Aug
|
Principal Global Services
|
Hyderabad
22 Aug
Principal Global Services
Hyderabad
Responsibilities:
Unique Opportunity
At Principal, we believe in encouraging innovation and excellence. As a Consultant - Info Security Engineer, you will have the outstanding opportunity to collaborate with world-class professionals in Hyderabad, Telangana, India. You'll play a crucial role in ensuring the security and integrity of our applications, both on-premises and in the cloud, by performing security penetration testing. This position is for those who are ambitious and determined to make a significant impact in the field of information security.
Key Responsibilities
- Perform manual security penetration assessments of web applications and APIs hosted within on-premises infrastructure.
- Conduct security assessments on web applications and APIs deployed in cloud environments using AWS services such as S3 buckets, EC2 instances, Lambda functions, API Gateway, and SNS.
- Apply re-engineering techniques using tools like Echo Mirage, IDAPro, CFF Explorer, Dnspy, MS sys-internals, Wireshark, dotpeek, and ghidra for thick client/desktop applications.
- Manage Vulnerability Disclosure Program (VDP) and Bug Bounty reports with detailed technical validation, consistent assessment of impact and severity, and fair evaluation aligned with policies.
- Use CVSS scoring mechanisms to assess risk levels of identified vulnerabilities.
- Innovatively identify techniques to exploit vulnerabilities in applications, generate impactful proof-of-concepts (POCs), provide walkthroughs to app-dev teams, and offer remediation mentorship.
- Write comprehensive reports and update existing documentation.
- Work independently and multi-functionally, mentoring peers and junior team members, helping them learn and apply recent attack techniques during security testing.
Qualifications:
Qualifications
- Bachelor’s or Master’s degree in Computer Science, Technology, Engineering, Mathematics, or related fields, or equivalent professional experience (B.E. / B.Tech / M.S. / M.Tech / MCA).
- 8-10
📌 Consultant - Info Security Engineer (Hyderabad)
🏢 Principal Global Services
📍 Hyderabad