Description

You will perform manual and automated security testing on software applications.

Responsibilities

• Execute manual and automated security tests across various software platforms.
• Analyze application security through the lens of Identity and Access Management (IAM).
• Identify vulnerabilities using OWASP Top 10, SANS Top 25, CWE, and CAPEC patterns.
• Utilize proxy tools and black box security testing tools to evaluate system integrity.

Required Skills

• 5+ years of experience in security testing.
• Proficiency in manual and automated software testing.
• Deep understanding of web application technologies and protocols including HTTP and HTTPS.
• Expertise in authentication technologies such as passwords, biometrics, OTP, digital certificates, PKI, device authentication, and FIDO U2F/Passkeys.
• Hands-on experience with proxy tools like Fiddler and black box tools like Burp.
• Experience with Static Security Code analysis tools.
• Strong knowledge of IAM and application security vulnerabilities.
• Bachelor's degree in computer science or equivalent experience.

Preferred Skills

• Experience with Single Sign On (SSO) using SAML, OpenID, and OAuth protocols.
• Knowledge of cryptographic algorithms, symmetric/asymmetric techniques, digital signatures, JWK/JWE tokens, and HSMs.
• Familiarity with Cloud security vulnerabilities, Threat Modelling, Secure Development Life Cycle (SDLC), and Mobile Application Security.
• Relevant security certifications.

Key Skills

Education

Any Graduate