- ·Ensuring security planning, testing, verification and risk analysis
- ·Able to understand STRIDE analysis and derive security test schema based on security threat model.
- ·Can evaluate recent tools and technologies and processes that enhance security capabilities
- ·Conducting security tests, protocol stack robustness assessment Codenomicon etc.
- ·Able to understand the protocol software usage overview and usage scenarios to derive the security aspects (domain knowledge, should be able to learn quickly)
- ·Ability to review the application/protocol code and identify the security flaws (preferably C code)
Required Skills:
- · 10+ years of experience in security testing on development or testing (protocol).
- ·Good knowledge of security tools and technologies for secure software development such as cryptography, authentication techniques and protocols, Fortify, coverity, taint analysis,
debuggers, Fuzz Test, Penetration test for telecom protocol stack.
- ·Should have experience in fuzz testing and knowledge of fuzzing tools like Peach
- ·You have good knowledge of network security tools (Nessus, NMap)
Database Security tools (NGS Squirrel, Secure CAT)
- ·Test security solutions using industry standard analysis criteria
- ·Ability to analyze vulnerabilities, impact analysis, risk analysis and security assessments
- ·Certified Ethical Hacker.
Qualifications
BE/B.tech/ME/Mtech in computer science with more than 8-15 Yrs of total experience.
Additional Information
Work Location: Bangalore
Divyasree Tech Park, EPIP Zone, Whitefield, Bengaluru.