6mo ago

Penetration Tester

India·Bangaloremid

EngineeringSecurity Engineer

4 views0 saves0 applied

Key Responsibilities

Design and implement security architectures, standards, and policies aligned with industry best practices.

Requirements Summary

Bachelor's degree in Computer science, Information Security, or a related field. Expertise in integrating security testing tools (SAST, DAST,

Technical Tools

EngineeringSecurity Engineer

~1 min read

→Design and implement security architectures, standards, and policies aligned with industry best practices.
→Conduct thorough threat modelling to proactively identify potential vulnerabilities and risks at the early stages of development.
→Execute security assessments, vulnerability scans, and penetration testing to uncover and mitigate risks effectively.
→Develop and maintain robust security tools and automation to streamline security processes and enhance efficiency.
→Implement proactive security monitoring and incident response processes, conduct in-depth root cause analysis, and implement corrective actions to prevent recurrence.
→Collaborate seamlessly with development teams to embed security into the software development lifecycle (DevSecOps) and foster a security-first culture.
→Define and track key security metrics to measure the effectiveness of security initiatives and drive continuous improvement.
→Stay up to date with the ever-evolving security landscape, emerging threats, and cutting-edge technologies to safeguard our systems.

~1 min read

Bachelor's degree in Computer science, Information Security, or a related field.
Expertise in integrating security testing tools (SAST, DAST, SCA) into the development environment to ensure early vulnerability detection.
Proficiency in security frameworks and standards (e.g., OWASP Top 10, NIST, CIS, ISO 27001) to ensure compliance and best practices.
Proficiency in scripting languages (PowerShell, Bash, etc.) and programming languages like Java, Python to facilitate automation and integration.
Knowledge of cloud security (AWS, GCP, Azure) to protect cloud-based infrastructure and data.
Experience with security tools (e.g., vulnerability scanners, intrusion detection systems) to identify and address threats effectively.
Strong analytical and problem-solving skills to address complex security challenges.

Certifications (e.g., CISSP, CISA, CISM) to demonstrate advanced security knowledge and expertise.
Experience with DevSecOps practices and tools to foster a collaborative security approach.