System Software Engineer

Responsibilities:

• Secures enterprise information by determining security requirements; planning, implementing and testing security systems;
• preparing security standards, policies, and procedures, Provide support for security incidents, Plan and execute security updates.

Skill Profile:

• Strong knowledge of the OWASP, SANS top 25, WASC security Standards and detailed knowledge of common web application attack vectors such as SQL injection, CSRF, XSS, Session Management issues, Direct Object reference, Click jacking, buffer overflows, etc.

About you:

• Experience in manual application penetration testing of thick client applications, mobile applications, web services, APIs etc.
• Thorough understanding of common web technologies like .NET, PHP, Java, XML, SAML, SOA, SOAP, web services etc. and protocols including HTTP(S), DNS, FTP, SSH etc.
• Had performed web/mobile application penetration testing on platforms.
• Should have knowledge on Risk Rating Standards like DREAD, CVSS with good understanding of web application architecture and Secure development life cycle(SDLC).
• Experience in threat modeling, risk analysis and automated web application vulnerability scanners (e.g., AppScan, Web inspect, Accunetix, Burpsuite Pro, etc) is desirable.