Good experience in application and or mobile security
Conduct vulnerability assessment that involves scanning IT assets and services, discovering vulnerabilities and remediation in data center and cloud environment
Vulnerability research and data analysis
Possesses hands-on knowledge of Web or Mobile application Security VAPT.
3+ yrs in web application security
Possesses strong hands-on knowledge on security tools like Kali, BurpSuite, Zap proxy, Nessus, SonarQube.
Possesses knowledge on OWASP Top 10 best practices.
Good knowledge on AWS or Azure cloud security
Possesses working experience in network tools like tcpdump, Wireshark, nmap.
Certifications in CEH, CISM, CISA or equivalent will be good to have.
DevSecOps will be good to have.
Good to Have:
Experience in at least one full lifecycle supporting PCI compliance is a must have.
Experience in managing and maintaining a vulnerability management program using Qualys is a must have.
Experience in developing content in Splunk searches, alerts (including POC and tuning), dashboards, Apps.
Experience of Security Incident and Event Management (SIEM) tools (Splunk) ingesting data (Forwarders, HTTP Event Collectors, add-ons), troubleshooting Splunk Installation.
Experience in Endpoint security (EDR) Detection and Response. Help create policies and SOP for Response workflow. Experience in Cortex XDR preferred.
Experience in Security evaluation of third-party tools.
Experience in Email Security and running phishing campaign.
Experience in Incident Management
Experience in system and network security.
Experience in Network Penetration testing.
Knowledge of software development, computer networks and Internet threat activity.
Programming experience in python, Perl and HTML/JS
Previous enterprise or platform/cloud vulnerability management experience and Cloud Security is a plus.
Excellent written and verbal communication skills, including experience engaging with executive and technical audiences.
Must be able to work in a fast paced, high-profile environment.
Strong leadership skills
Work closely with customers to drive customer projects.
Good written and verbal communication skills.
Competent enough to be positioned to customers for interviews.
Good attitude and team player.
Ability to quickly grasp new technologies.
Ability to troubleshoot issues and isolate the cause of the issue if possible.
Proactively communicates status and risks.
Conducts technology trainings and mentors juniors.
