Description

Key Skills: OWASP, SAS, DAS

Roles and Responsibilities:

  • Conduct vulnerability assessments, penetration testing, and source code reviews.
  • Automate technical tasks in CI/CD through the use of APIs or tools.
  • Perform application source code security reviews for APIs, middleware, and frontends in Java, Python, Node.js, etc.
  • Exploit security flaws and vulnerabilities with attack simulations on multiple application platforms including Web, iOS, Android, and cloud platforms.
  • Perform SAST & DAST and improve the Software Development Life Cycle (SDLC).
  • Develop solution architecture and blueprints based on business technology and security objectives.
  • Research and maintain secure coding guidelines.
  • Conduct Security Architecture and Low-Level Application Security Design reviews involving Data Protection, Authentication and Authorizations, Web Application Security, and Network Security.
  • Collaborate with product teams to achieve cybersecurity objectives.
  • Maintain an active understanding of industry practices for secure software development and incident response.
  • Standardize and maximize automation in the CI/CD pipeline.
  • Utilize application security testing tools such as BurpSuite, OWASP ZAP, SQLMap, and Kali.
  • Engage in bug bounties and responsible disclosure awards.

Skills Required:

  • Proficiency in OWASP security standards and vulnerability mitigation
  • Experience with DAST (Dynamic Application Security Testing) and SAST (Static Application Security Testing)
  • Knowledge of secure coding practices across languages like Java, Python, Node.js
  • Familiarity with application security tools: BurpSuite, OWASP ZAP, SQLMap, Kali
  • Ability to perform penetration testing, source code reviews, and security design assessments
  • Understanding of CI/CD security integration and automation

Education: B.E., B.Tech, B.Tech M.Tech (Dual), M.Tech, M.E

Education

Any Graduate