Security product testing/ application security testing - CSIRT - Delhi

Educational & Other Qualifications

B.Tech /B.E./M. Tech/MS in Computer Science/Information Technology/Cyber Security Or MCA/MSc (Compute r Science) /IT /Cyber Security

Certification & Training

CEH along with OSCP or Cloud security certifications equivalent

Work Experiences

Work Experiences

Minimum 5

years in

following domains Internal, external & client-side Automation testing techniques

Deep technical knowledge and hands-on skills in Application Security.

Deep understanding of web application security threats, exploits, prevention (SQLi, XSS, CSRF etc).

Experience with Red team

exercises, threat hunting, OSINT.

Knowledge of

relevant data compliance standards.

Experience using one or more development languages

/platforms: Python, Java, JavaScript, .Net, and SQL.

Familiarity with network analysis tools like

Wireshark, Charles, and Nmap, TcpDump.

Familiarity with the OWASP Top 10 and hands-on experience with automated testing tools such as Burp Suite, Metasploit, Snyk, and,Nessus,

Hands-on experience with cloud security configuration.

Knowledge of Indian Common Criteria Certification Scheme (IC3S) for certification for evaluation & certification of It Security Products.

Roles Description

Ensure Application (IT and wherever possible OT) Security for

• Standalone Application,
• Web based Applications
• Application Programming Interfaces (APIs)
• Cloud Native Applications

Evaluate testing process and practices, develop and execute standard testing strategies.

Conduct security architecture/design reviews to identify and fix issues in the applications and infrastructure.

Review source code for potential security issues. Perform vulnerability assessment, penetration testing, and prioritize the vulnerabilities.

Documentation of security findings & reporting.

Perform Pen testing (both tools based as well as manual) for

• Web based Applications including residing on Cloud,
• HTTP based web services, microservices, REST and SOAP API.
• HTTP based IoT applications and microservices.
• All types of Websites (eg. OpenSource CMS such as WordPress or proprietary MSSharePoint