Application Security Testing Professional

Role: Application Security Testing

Location:

Experience:

Highest Qualification:

Job Profile Details:

Execute complex and enterprise application (mobile, web services, web apps, thick-client) and infrastructure security testing projects

Complete the projects within defined timelines and deliver high quality reports

Gain in-depth knowledge and understanding of mobile applications and their architecture

Build understanding of different types of web services and microservices and perform security testing of them

Perform vulnerability likelihood determination, impact analysis and risk determination

Showcase prioritization of risks including solution recommendation and documentation

Identify and infer the business risk posed by the weaknesses identified during the assessments

Demonstrate strong communication (verbal and written) with internal and customer stakeholders

Engage with both business and technical teams within and outside the organization from a project scope definition, project execution, project closure perspectives

Stay current with emerging technologies and industry trends and conduct knowledge sharing sessions to rest of the team members

Build knowledge on different risk assessment methodologies and frameworks and how to apply them to diverse applications.

Be open for onsite deployments as business demands

Skills required: 3+ years of Application Security Testing experience

Expertise in application security testing

Atleast 1 year experience with mobile application security testing

Knowledge of mobile application architectures

Experience with web services security testing

In-depth understanding of AJAX and SOAP & RESTful web services

Ability to handle difficult situations and challenging customers Flexible and creative in finding acceptable and alternative solutions

Good communication and writing skills with ability to talk to both business and technical personnel

Preferred Skills:

Experience in Application Architecture Reviews will be a plus.

Security code review experience will be a plus

Knowledge of different development frameworks for mobile applications

Any CyberSecurity related certification

Basic understanding of the following protocols/technologies such as SSL/TLS and Cryptography (symmetric and asymmetric encryption, PKI, etc.)

Ability to work alone and in collaboration with a team