Information Security Associate

What we are looking for in a candidate

• Interact with teams to develop understanding of Policybazaars security landscape/posture
• Execution of/support the team in techno compliance gap assessments against the below mentioned standards/guidelines: ISO 27001 , PCI DSS ,CERT-In , NIST-CSF
• Understanding/Implementing information security policies and processes in accordance with industry best practices
• Conducting vulnerability scans and penetration testing to identify security weaknesses across infrastructure and application landscape
• Documenting and reporting findings, including recommendations for remediation and liaising with internal stakeholders for closure
• Staying current with new attack vectors and tools, and incorporating them into testing procedures
• Collaborating with other teams to prioritize remediation efforts

Skills

• Proven work experience of 2-3 years in information security domain
• B.Tech or equivalent degree in Computer Science, Information Security or related field
• Excellent written and verbal communication skills
• Good understanding of technology risk assessment frameworks
• Ability to contribute individually, and as a part of team
• Knowledge of OWASP Top 10 is a must
• Knowledge of NIST CSF, MITRE ATT&CK is preferable
• Good to have technical security certifications like OSCP, PNPT, CRTP, or similar
• Experienced in DAST, SAST and Infra VAPTand infrastructure penetration testing techniques
• Experienced in penetration testing methodology and techniques
• Ability to identify security vulnerabilities and suggest appropriate mitigation steps
• Must have knowledge about the Cyber threat Intelligence and Source Code Review