Driving Infinite Possibilities Within A Diversified, Global Organization

JOB DESCRIPTION - CYBER SECURITY ENGINEER

Must Have Skills

2 to 4 years of experience in Systems / Network / Application / Cloud / Hardware penetration testing

Has a Bachelor's Engineering degree or equivalent, preferably in Computer Science

Perform penetration tests (Manual & Automated) for products spanning Web, Mobile (Android and iOS), Cloud, Dockers, Containers and Thick Clients

Reverse engineering of applications and detailed analysis of pen test results to identify the security vulnerabilities and suggest countermeasures for threat mitigation

Good understanding of Secure Development Lifecycle processes

Good knowledge of OWASP Top 10 and SANS Top 25 and how to effectively remediate vulnerabilities associated with each

Knowledge of attack frameworks like MITRE, VASTO, CIS Benchmarks, Virtualization Assessment Toolkit to exploit virtualization systems

Demonstrated manual product penetration testing experience for example, simulate a SQL injection attack without using tools, simulate XSS attack, X-Path Injection, etc.

Good knowledge and hands-on experience using various penetration testing tools like Nessus, Web Inspect, Nmap, Burp Suite, AppScan, ZAP and Kali Linux tools

Encryption tools and techniques for securing mobile and virtual machines

Should be able to test JTAG, UART and other interfaces for potential attacks

Communicate results and security risks with Product Owners

Good communication and negotiation skills

Highly motivated with willingness to take ownership/responsibility for their work. Ability to work both independently and in a team-oriented environment

Highly customer-focused

Adept at selecting and utilizing appropriate technologies to solve complex problems effectively

Ability to work with geographically distributed, cross-functional teams

Good to Have Skills

Domain knowledge of ICS and related security trends

Certification such as CEH, OSCP, OSWE, CCSP, CCSK will be highly desirable

Strong Secure SDLC concepts