Description

Job Description

Description:

Min 3 days a week from office with Bachelors min 8 years of experience required and min 10 Years if candidate has certification/no degree.

Key Responsibilities

• Develop and execute cybersecurity test plans based on product requirements, architecture, and design specifications
• Perform security validation across: Cloud environments (AWS, Google Cloud Platform, Azure)
• Backend services and APIs
• Connected/IoT devices and endpoints
• Analyze network traffic and troubleshoot security issues using tools such as Wireshark, OpenSSL, and proxy frameworks
• Perform API security testing, traffic interception, and replay analysis using tools such as Burp Suite or Fiddler
• Validate secure communication protocols, including TLS 1.2/1.3 and certificate-based authentication (mTLS)
• Collaborate with development, DevOps, and security teams to identify and remediate vulnerabilities
• Document test results, defects, and risk assessments clearly and effectively

Required Qualifications

• Bachelor's degree in Computer Science or equivalent experience
• Strong knowledge of cybersecurity principles, tools, and methodologies
• Deep understanding of TLS/SSL, PKI, and certificate management
• Strong experience with Python scripting for automation and testing
• Experience with cloud platforms (AWS, Google Cloud Platform, Azure) and secure architecture principles
• Strong understanding of networking fundamentals (TCP/IP, DNS, HTTP/S)
• Experience with Linux and Windows environments
• Experience with API testing, traffic interception, and debugging tools
• Proven ability to independently troubleshoot complex systems
• Excellent written and verbal communication skills

Preferred Qualifications

• Experience with IoT, embedded systems, or connected devices (medical device experience a strong plus)
• Familiarity with Microsoft Endpoint Manager (Intune, MECM)
• Experience with containerized environments (Docker, Kubernetes)
• Experience with DevSecOps tools and CI/CD pipelines
• Familiarity with security assessment tools (ScoutSuite, Prowler, Snyk, etc.)
• Experience with test management tools (Jira, Xray)
• Understanding of regulatory environments (medical device design controls is a plus)

Key Skills

Education

Not specified