Job Description

Secures enterprise information by developing, implementing, and enforcing security controls, safeguards, policies, and procedures

What will your job look like?
The major focus will be on 1) Red Team Activities followed by
2) Network Penetration Testing and
3) Mobile Security Assessments.
Offensive Security Certifications in Web Application / Network Based Testing is preferred OR
Well documented Bug Bounty experience will also be considered, as practical show of skill
As an Information Security Analyst, candidate must focus on identifying and assessing vulnerabilities in Web Application Systems, Networks and Mobile Based Application.
BusinessLogic based application testing
Penetration testing of Mobile applications and websites.
Exploitation of the issues found and presenting the impact occurred
Chain multiple vulnerabilities / flaws together to show-case higher severity / impact.
Familiar with following:
Intercepting Proxies (Burp suite, Paros, OWASP ZAP)
Effective use of Linux as an offensive tool
Scripting Languages: Python, Ruby, Go, Bash
Using cloud to attack end points / deploy exfiltration points
Well versed with OWASP Top Ten and WASC Threat Classifications

All you need is...
Understanding of the nature and sources of security vulnerabilities, how to identify and exploit them
Strong expertise in security technologies and significant experiences in information technology focusing on security related vulnerabilities
Application Security Testing/Penetration Testing (Web based, Web Services, Mobile) - Must
Network Security Testing/Penetration Testing (Network, OS, Databases etc.) - Must
Static Code Analysis/ Secure Code Review Not Mandatory
Good to have programming experience in Java, BASH, Go, Perl, or Python (at least 2)
Sound Knowledge of TCP/IP protocol Stack, HTTP protocol, encoding standards, encryption technologies and development frameworks.
Security defect Tracking and working closely with Developers to fix the issue Decent Communication Skill Set
Bachelors or higher degree in Computer Science or equivalent experience
Education: Any Graduate
Industry: IT-Hardware/Networking, Telecom

Skills Required