Description :

Experience :

Minimum work experience : 7 + Years

General :

- Good knowledge in DevSecOps, DAST & SAST

- Performing secure code reviews with Checkmarx.

- Able to understand the Historical data and analyzed the applications.

- Involve in client calls to update the Status as a security testing representator

- Identify, raise security defects, and provide action items to fix the vulnerabilities.

- Schedule calls with Business Owners and developers to discuss the security flaws and mitigation plan to remediate the vulnerabilities

- Able to Provide comprehensive report on findings and action items to fix the identified vulnerabilities.

- Able to prepare the Final Report preparing and provide recommendations to the customer.

- Expert in Security testing results analysis and walkthrough with stakeholders

- Managing Team Lead Responsibilities

Technical :

- Involve in End-to-End security requirements for Web Application Audit, Mobile Application Audit and Web Services Security Testing.

- Creating and maintaining various checklists and process documents for Web Applications and Mobile Application Penetration testing.

- Performing manual and automation application security assessment of various applications in Banking, Retail, Ecommerce, Manufacturing, Telecom etc.

- Proficient in different Security Analysis Tools like Burp Suite Pro, Checkmarx, OWASP ZAP, Acunetix, AppSpider, NMAP etc.

- Able to have handle direct interaction with the clients, development teams, to explain the security assessment approach, discussing reports and helping out with the remediation procedure.

- Review & identification of the security issues highlighted and analyze the false positives.

- Able to understand the Business case, Business Impact Analysis(BIA) & Product Impact Analysis (PIA)

- Perform manual and automated scanning of the application using web vulnerability scanner.

- Researching and understanding various new and existing vulnerabilities and finding effective mechanisms to detect and prevent them.

- Documenting & reporting the various vulnerabilities found in the above process and suggesting mitigations for the same.

- Good knowledge on common Industry framework and standards like OWASP, SANS, NIST etc

Additional :

- Performance Testing using tools like JMeter, Load Runner etc.,

- Monitoring tools like Dynatrace, App Dynamics etc.,