Cyber security Engineer

Cyber security Engineer
At least 7 to 8 years Experience in Vulnerability Assessment and Penetration testing of web applications, mobile applications, API and thick client applications.
Good knowledge on web application security, OWASP, Application Security testing, Network Penetration testing, Code Review, Vulnerability Assessment and Appscan
Experience in cyber security penetration testing (Manual, PT, VAPT, DAST, SAST, API)
Hands on experience in setting up the network environment for VAPT
Manual penetration testing skills and techniques are required besides automated tools and frameworks.
Hands on experience in identifying false positives
Hands on knowledge on tools: Burp Suite Professional, Qualys, Nmap, Kali Linux, Metasploit, Nessus, Wireshark, Sqlmap, Checkmarx etc
Strong knowledge of tools for mobile application security, including but not limited to Appuse, MOBSF, Geny Motion, Kali Linux, BURP, PostMan, Appie, Mobisec, NowSecure, HP Fortify On Demand
Good Understanding of OWASP Top 10 for web application security and Mobile application security.
Perform mobile vulnerability assessment and Penetration testing.
Good understanding of Microservice based architecture
Experience working in a DevSecOps environment with knowledge of continuous integration, containers, DAST/SAST tools
Good understanding of Database security requirements.
Good knowledge of cloud environments and should be able to perform VAPT on AWS, Azure etc.
Scripting and coding experience(good to have)
Certifications: OSCP, CEH

Skills:

• Vulnerability Assessment(IAVA)