22 Aug
|
Principal Financial Group
|
Hyderabad
22 Aug
Principal Financial Group
Hyderabad
Additional Information
Why Principal?
At Principal, we believe in fostering a cooperative and welcoming environment where everyone's input is appreciated. We are committed to your career development and assist our team members in reaching their personal and career ambitions. Join us and become part of a world-class team that is making an impact
Responsibilities
Unique Opportunity
At Principal, we believe in encouraging innovation and excellence. As a Consultant - Info Security Engineer, you will have the outstanding opportunity to collaborate with world-class professionals in Hyderabad, Telangana, India. You'll play a crucial role in ensuring the security and integrity of our applications, both on-premises and in the cloud, by performing security penetration testing. This position is for those who are ambitious and determined to make a significant impact in the field of information security.
Key Responsibilities
- Perform manual security penetration assessments of web applications and APIs hosted within on-premises infrastructure.
- Conduct security assessments on web applications and APIs deployed in cloud environments using AWS services such as S3 buckets, EC2 instances, Lambda functions, API Gateway, and SNS.
- Apply re-engineering techniques using tools like Echo Mirage, IDAPro, CFF Explorer, Dnspy, MS sys-internals, Wireshark, dotpeek, and ghidra for thick client/desktop applications.
- Manage Vulnerability Disclosure Program (VDP) and Bug Bounty reports with detailed technical validation, consistent assessment of impact and severity, and fair evaluation aligned with policies.
- Use CVSS scoring mechanisms to assess risk levels of identified vulnerabilities.
- Innovatively identify techniques to exploit vulnerabilities in applications, generate impactful proof-of-concepts (POCs), provide walkthroughs to app-dev teams, and offer remediation mentorship.
- Write comprehensive reports and update existing documentation.
- Work independently and multi-fun
📌 Consultant - Info Security Engineer (Hyderabad)
🏢 Principal Financial Group
📍 Hyderabad