Job Description

We look for the risk-takers, the collaborators, the inspired and the inspirational. We want the people who are brave enough to work at the cutting edge and create solutions that will enrich and improve the lives of people across the globe. So, if you want to make the world say wow, let's talk.
The conversation starts here. If this role matches your ambitions and skillset, let's get started with your application. Take a look at our other open positions too. Our many opportunities can lead to infinite possibilities.

• 
  Work closely with application, network and infrastructure teams when performing tests against new or existing systems
• Use manual techniques to exploit identified vulnerabilities like cross-site scripting, SQL injections, session hijacking and buffer overflows to obtain controlled access to target systems
• Validate vulnerability assessment results where appropriate, prioritize the remediation requirements and work with network, infrastructure and desktop teams to address security problems
• Perform exploit analysis for identified vulnerabilities manually, with custom scripts or use tools such as Metasploit
• Work closely with the application development teams, technology teams and the other members of the Information Security team to identify and remediate security issues as part of Incident Response
• Be a part of the SDLC process for testing of new application systems/infrastructure
• Participate in multiple organizational areas such as security architecture and design, service delivery, training and client communication

• Configure and educate on the use vulnerability assessment scanners (ex: Qualys, Nessus, Nmap, Metasploit, Snort, Nexpose, etc)
• Create, maintain and report metrics that measure effectiveness of various security controls.
• Document areas of significant exposure to information systems and recommend solutions.
• Develop and maintain a formal reporting process highlighting results, conclusions, and recommendations which can be viewed by peers and senior management
• The ability to articulate risks and findings to management