This job ad has been posted over 30 days ago...

68

applicants

Information Security/ Sr. Information Security Consultant Full-time

at SecurEyes Techno Services Pvt. Ltd. in Banglore (Published at 27-02-2018)

About SecurEyes - SecurEyes is a pure-play information security consulting firm which started in 2005 with global offices & presence at India, UAE, Oman, KSA & USA. It specializes on Risk Assessment, GRC Consulting, Information Security Training and on-demand information security consulting. Our clients include large Government Organizations, Banks & Financial Services Institutions, International Airlines, Large Trading Houses and Public sector companies across the globe. We are technically focused with passion, integrity and with a strong belief in providing world-class services to our clients to create a difference in their information security environment.

Job Title – Information Security Consultant/ Sr. Information Security Consultant

Job Location – Bangalore

Experience – 3 to 7 years

CTC – As per Industry Standard

Job Description:

• Strong knowledge of the OWASP, SANS top 25, WASC security Standards and detailed knowledge of common web application attack vectors such as SQL injection, CSRF, XSS, Session Management issues, Direct Object reference, Click jacking, buffer overflows, etc.
• Experience in manual application penetration testing of thick client applications, mobile applications, web services, API’s etc.
• Thorough understanding of common web technologies like .NET, PHP, Java, XML, SAML, SOA, SOAP, web services etc and protocols including HTTP(S), DNS, FTP, SSH etc.
• Had performed manual mobile application penetration testing on platforms like Android, IOS etc.
• Should have knowledge on Risk Rating Standards like DREAD, CVSS etc.
• Good understanding of web application architecture and Secure development life cycle(SDLC).
• Experience in threat modelling and risk analysis.
• Experience in automated web application vulnerability scanners (e.g., AppScan, Web inspect, Accunetix, Burpsuite Pro, etc) is desirable.
• Should be ready to travel within and outside the country.
• Preparing audit reports and findings tracker sheets for each application in the provided template.
• Communicate with customer teams to explain and demonstrate vulnerabilities to application/system owners, and assist with the mitigation of the identified vulnerabilities.
• Researching the latest security best practices, staying abreast of new threats and vulnerabilities and helping to disseminate this information within the group as well as the organization.


Skills required/Expertise:
• 3+ years of proven experience in application security domain
• Proficient in written and oral English communication skills.
• Expertise in web application security testing.
• Expertise in mobile application security testing.
• Strong organizational, team-work, multi-tasking and time-management skills.
• Lead at least a team or two to three consultants.
• Manage a team during project execution as needed for the smooth execution of the project.
• Experience in banking domain will be added advantage.
• Experience in VA/PT of networks, servers, devices will be added advantage
• Experience in static and dynamic secure code review will be added advantage




Recent jobs at SecurEyes Techno Services Pvt. Ltd.


Viewed: 1122 times
« Go back to category
Is this job ad fake? Report it!   
Recommend to a friend