Lead Penetration Tester

8.00 to 13.00 Years Bangalore+8Chennai, Noida, Hyderabad, Gurugram, Kolkata, Pune, Mumbai City, Delhi 07 Sep, 2022

Job Location	Bangalore+8Chennai, Noida, Hyderabad, Gurugram, Kolkata, Pune, Mumbai City, Delhi
Education	Not Mentioned
Salary	Not Disclosed
Industry	IT - Software
Functional Area	IT Operations / EDP / MIS
EmploymentType	Full-time

Job Description

Responsibilities:Lead and perform hands-on penetration testing and vulnerability assessments on critical mobile (iOS and Android) and web applications, APIs, and cloud infrastructure to assess and validate security posture.Conduct infrastructure code and application source code reviews to look for potential security gaps and make recommendations to appropriate stakeholders.Drive and manage the overall BAU and project-based security assessment pipeline.Proactively work with multiple technical and development stakeholders across the business to ensure security best practices are embedded into the earliest stages.Drive the uplift and tuning of code security review and automated security scanning solutions.Write high quality security reports on identified security vulnerabilities and provide steps for remediation.Work alongside stakeholders to support and guide on remediation efforts.Engage and manage security suppliers where applicable.Deliver technical security education and awareness workshops to technology stakeholders.Coach and mentor junior team members.Requirements:8+ Years experience in IT security related positions with a primary focus on penetration testing, application security, and vulnerability assessments. You should be able to demonstrate:Passion for offensive security and assurance.Deep understanding of penetration testing methodologies, vulnerability identification, and software security principles.Being able to translate complex technical scenarios, cyber security specific threats, and related mitigating controls into a language that stakeholders at all levels can understand.Strong knowledge of risk management guidelines and frameworks.Hands-on threat, vulnerability, patching, and remediation management experience.Ability to act calmly and competently in high-pressure, high-stress situations.Must be a critical thinker, with strong problem-solving skills and analytical skills.Excellent time management skills and ability to manage multiple projects under strict timelines.Development and automation experience in one or more programming languages are highly desired.Previous experience working in a cloud environment is highly desired.Experience or exposure to Intelligence-Led Penetration Testing and Red Teaming are highly desired.Ability to contribute in a team environment.One of more industry-recognized certifications in penetration testing (OSCP, OSWE, CREST CCT / CRT, GWAPT, GPEN, etc.).Desirable industry recognized certifications in Cyber Security (CISSP, CISM, SSCP, etc.).Participation in relevant Cyber Security industry forums is desirable.Familiar with technology regulations, e.g., HKMA TM-G-1 and TM-E-1, is a plus.

Keyskills :
risk managementsoftware security principles

APPLY NOW