Purposeful work culture and people oriented organization
Exposure to working on enterprise national and international $million projects
Complete job and employee security
Warm, authentic and transparent communication
Time to time jon feedback and exposure to different technologies
Appreciation and rewards on performance achievements.
Key Responsibilities -
Work with the team to plan, prepare, execute, and summarize the security testing
Review and correlate security logs
Work with a team in delivering and implementing consistent test disciplines and processes using associated best practices across the program.
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Artful communication skills and organizational savvy, to steer peers and leadership toward solutions that carefully balance business, risk, compliance, and engineering concerns.
Eagerness to challenge the status quo, balanced with a reasonable and methodical approach to effecting change.
Security testing- Penetration security/ Infrastructure security/ cloud security/Devsecops security/ Application security
Collaborate and consult with peers, colleagues and managers to resolve issues.
Technical Requirements -
Understanding of security practices of various CSP(Cloud Service Provider).
Understanding of Web Application n-tier architectures, threat modeling and secure coding practices.
Understanding of security vulnerabilities and remediation detailed by organizations like OWASP, SANS, etc
Experience assessing Application Security - - development, implementation and maintenance of Application Security posture in an enterprise organization.
Identifying, measuring and detailing risks and recommendations on the security controls
Ability to analyze vulnerabilities appropriately characterizes threats, and provide sound remediation advice
Familiarity with commercial testing applications (ie Burp, dbProtect, Acunetix, SonarQube)
Knowledge of network protocols and network monitoring like "sniffing" (eg Wireshark, tcpdump)
Knowledge of tools used for Thick clients, web application, and mobile security testing.
Experience in SIEM and SOC solutions.
Experience in two or more of the following: Rapid7 InsightVM, Crowdstrike, ProofPoint, Nexpose, Nessus, Qualys, Splunk, Endpoint Security, etc
Coding/scripting experience (Python, Ruby, C, Assembly, Bash, PowerShell, etc)
Professional Attributes -
Excellent communication skills
Attention to detail
Analytical mind and Problem Solving Aptitude
Strong Organizational skills
Visual Thinking
Education : B.E/B.Tech in Computer Science or a related technical degree or M.S/M.Tech in Information Security.
Experience : 1-2 years
Keyskills: Coding Powershell Information security SOC Network security Security testing Application security Ruby Python
XenonStack Private Limited We are Enterprise Data and AI Platform and Cloud Transformation Company with vision in transforming enterprises to AI-First Organizations Building Intelligent Distributed and Data-driven Decision Platforms on Enterprise Data, AI, IoT, Cloud and DevOps. We Primary Focus...