Education: B.E/B.Tech

Experiense: 6-10 Years

Position:lead Pen Tester

Location: Bangalore

Responsibilities:

• Strategize and improve current process, develop best practices and create check lists for ensuring highest quality Penetration testing

• Assist development team in building secure applications/products through increased awareness

• For application under development at the centre,

  • Develop Test Strategy and Plan to test all security testing requirements of the project

  • Design penetration test to validate security requirements of the application

  • Carry out threat modelling for applications/products to test for security during development

• Coach/mentor the other development to peers in competency especially in the fields of secure coding, secure design and architecture

• Should be Self-motivated and innovative with strong problem-solving skills

• Should be self starter and handle complex

• Have initiative to learn / propose best practices, ideas to improve the application

Requirements:

• Penetration Testing
• Threat ModellingSecure SDLC
• Secure Code Review
• German Language Skills

• Be an individual contributor in the field of Penetration Testing

• Work closely with other Penetration testers

• Report to CoC Head of Testing and Information Security

• Understand companies’ security policies, standards and guidelines and their implementation in local locations

• Be an active member of the Global Application Security Assessment Core Group

  • Regular participation and

  • Contribution of best practices and techniques

  • Improvisation of overall service, globally

  • Improve security policies, standards and guidelines.

• For Applications under test:

  • Identify Security Testing requirements of the application under test

  • Execute penetration test on the application in different environments/test conditions

  • Review/consolidate findings from other Pen-testers

  • Validate and prioritize the issues identified with

  • Prepare assessment reports and management summary

  • Clarify/assist the development team to resolve/mitigate security vulnerabilities identified

Regards,

Sharmila