Application Security Testing

Required Skills

1. Minimum of 3-9 years experience in application security testing, deployment, and security management phases.

2. A strong foundation in security principles and concepts, including confidentiality, integrity, availability, authentication, authorization, encryption, and secure coding practices.

3. Proficiency in threat modeling methodologies and tools to identify and assess potential security threats and vulnerabilities in software and systems.

4. Deep interest in application specific vulnerabilities, infrastructure knowledge.

5. Experience in collecting, analyzing, and interpreting qualitative and quantitative data from defined application security services related sources (tools, monitoring techniques etc.)

6. In-depth knowledge of security architecture design and best practices, including secure design patterns, access control, and data protection

7. Knowledge of cloud security frameworks (e.g., AWS Well-Architected Framework, Azure Security Benchmark) to assess and improve security measures.

8. Familiarity with security standards and frameworks, such as OWASP Top Ten, NIST Cybersecurity Framework, ISO 27001, and CIS Controls.

9. Ability to conduct risk assessments to evaluate the potential impact and likelihood of security risks and provide risk mitigation strategies.

10. Familiarity with security testing tools like vulnerability scanners, penetration testing tools, and code analysis tools