Send me alerts every days
Share this Job
Application Security Tester
Date: Aug 1, 2020
Location: IN
Company: Larsen & Toubro Infotech Ltd
The primary responsibilities of this job role are as follows:
1) Perform application security testing SAST, DAST and IAST.
2) Perform application security testing of Web, Mobile (Android and iOS), and API etc.
3) Preparation of the final test report.
4) Interaction and communication with developers for POC and support in mitigation of vulnerability.
5) Security Code review for in-house applications
6) Ensure that applications built for HSBC customers and staff are in accordance with the guidelines and policies provided by the HSBC Global Cyber Security team
7) Assess and identify any possible vulnerabilities in technology being developed prior to implementation.
Technical skills:
1) Candidate should have minimum 8 years and above hands on experience in application security testing and vulnerability assessment (VA)
2) Application Security Testing DAST:– Experience in web application, API Security, and mobile application security testing in conformance to various industry standards like OWASP top 10, SANS top 25 etc.
3) Application Security Testing SAST:– Experience in manual and automated source code review of applications developed in JAVA, Spring Boot, Angular, Swift, Kotlin etc.
4) Expert level knowledge of tools like Burp Suite, IBM appscan (standard and source), HP Fortify, Postman, SoapUI, Checkmarx, Contrast etc. to perform the security testing.
5) Good to have experience in application risk assessment, threat modeling and knowledge on STRIDE model.
6) Sound knowledge on Cryptography and secure coding best practices.
7) Hands on experience in working with DevOps and Agile teams following a secure software development lifecycle. Should be able to provide hands on leadership in improving automation and incorporating security as part of the CI/CD pipeline.
8) Good to have knowledge on programming and scripting skills in languages like Java, JavaScript, Angular, Spring Boot, Kotlin, and Swift etc.
9) Good to have knowledge of cloud platforms (Azure, AWS and GCP) and experience in performing security tests against applications deployed in cloud.
10) Industry certifications should be added advantage – At least one of the below is recommended apart from CEH
a. GIAC GWAPT
b. GIAC GPEN
c. GIAC GMOB
d. CISSP
e. OSCP
Non-technical skills:
1) Excellent communication skills are mandatory. The role demands a great deal of interaction with various global teams and clarity in thought and word is needed on a daily basis.
2) Strong ability to prioritize tasks and ability to deliver a portfolio of testing assignments.
3) Strong decision making skills and the ability to act independently without much direction
4) Strong inter-personal and mentoring skills. A demonstrated ability of mentoring junior members in the team would be an asset.
5) Strong ability to translate between business talk and technical details is a must. The role requires interaction with non-technical business staff.
Job Segment:
Developer, Testing, Java, Cloud, Technology
