• 5+ Years of experience in working on Security aspects
• Must be proficient in understanding various aspects of Application Security in a cloud
• setting and should have worked on tightening the security at all levels.
• Ability to translate Information Security policies and procedures into language that a business and/or technical person can understand
• Experience with vulnerability scanning tools (e.g., Qualys, Nessus, Nexpose, Saint, AWS Inspector, Kali Linux)
• Experience in Mobile Application testing including iOS and Android.
• Experience with web application vulnerability scanning tools (Burpsuite Pro, Veracode)
• Experience with network/infrastructure-level penetration testing
• Excellent communication skills to collaborate with both external and internal stakeholders to maintain the overall Information Security for KloudGin.
• Must have experience on AWS landscape and understanding of security aspects related to EC2, VPC, CloudFront, WAF, Shield, Secrets Manager, Inspector, CloudTrail, CloudWatch, Systems Manager, IAM, Config, etc.
• Should be aware of various CIS Benchmarks and be able to tighten the application and database servers based on the guidance.
• Experience in Application security and Mobile security Including OWASP technologies, vulnerability research and Mitigation.
• Awareness of CISSP certification will be a plus
• AWS Certification will be a plus
• Certification in any of these or similar certifications – CEH, ECSA, OSCP will be a plus.
Responsibilities
• To manage the Information Security Program and IT Operations at KloudGin.
• To perform web Application vulnerability scans leveraging both tools and manual checks.
• To use both DAST and SAST tools to identify the vulnerabilities and work with the developers to fix and remediate the same.
• To perform application security risk assessments.
• To conduct penetration testing using various tools and block the exposures in coordination with the development teams.
• To mana