Roles and Responsibilities

The Role: Senior Security Test Engineer

Grade (relevant for internal applicants only): 10

The Location: Gurgaon

The Team: The team is responsible to protect applications & product within the company which are built to empower the markets, the responsibility includes the team to protect from bad actors & making sure security hygiene is encompassed in the software development.

The Impact: This role would be responsible for running Static & dynamic scans within the SDLC, resource would also be responsible for working with developers to deliver business functionality on time with required quality that meets the acceptance criteria.

Responsibilities:

Design, Create and execute penetration tests on Web, Mobile and Infrastructure

Perform static and dynamic analysis on customer facing applications, websites, and large enterprise networks

Work with internal and external stakeholders to deliver high quality penetration tests

Provide reports that clearly articulate vulnerabilities and weaknesses to clients

Create tools and frameworks with quality code to simplify testing scenarios

Design and develop Security test plans, test cases, execute test cases, analyze and report test results to the teams

Work in partnership with the development teams to deliver business functionality on time with required quality that meets the acceptance criteria

Involved in requirements review and participate in architecture/design reviews with an emphasis on security test strategy and ensuring best practices

What We’re Looking For:

Develop and execute Penetration Tests for various platforms

Relevant skills to conduct penetration testing in the following domains: Application, Infrastructure, Mobile (iOS, Android), Wireless, Physical assessment and Code review

A consistent record of discovering, analyzing, and exploiting application vulnerabilities and misconfigurations on Windows and Linux platforms

3+ years’ experience in Information Security Role

3+ years’ experience in performing security penetration testing

Experience in developing custom tools when necessary

Must have 2+ years of Commercial Web Application Tool Experience (i.e. Burp, AppScan, WebInspect.)

The ability to work with stakeholders throughout the vulnerability lifecycle to communicate issues and provide remediation guidance

Provide regular assessment progress updates that include sufficient detail to convey work completed and upcoming activities

Provide subject matter expertise in support of security incidents/investigations as required.

Knowledge of web application full-stack architecture and network models.

Demonstrate technical competency in security engineering based on hands-on experience or relevant qualifications

Experience in programming using Python/C#/Java/Java Script or other languages

Strong communication skills and ability to produce clear, concise and detailed documentation

Excellent problem solving, analytical and technical troubleshooting skills

Bachelor's or higher qualification in Computer Science, Information Systems or equivalent is preferred