Description

You will perform manual and automated security testing on software applications, focusing on Identity and Access Management (IAM) and vulnerability identification.

This role is on-site.

Responsibilities

• Execute manual and automated security tests across various software platforms.
• Analyze application security through the lens of IAM, identifying vulnerabilities using OWASP Top 10, SANS Top 25, CWE, and CAPEC patterns.
• Evaluate system integrity using proxy tools and black box security testing tools.
• Conduct static security code analysis to identify potential risks.
• Test authentication technologies including passwords, biometrics, OTP, digital certificates, PKI, device authentication, and FIDO U2F/Passkeys.

Required Skills

• 5+ years of experience in security testing.
• Proficiency in manual and automated software testing.
• Deep understanding of web application technologies and protocols, including HTTP and HTTPS.
• Hands-on experience with proxy tools like Fiddler and black box tools like Burp.
• Strong knowledge of IAM and application security vulnerabilities.
• Bachelor's degree in computer science or equivalent experience.

Preferred Skills

• Experience with Single Sign On (SSO) using SAML, OpenID, and OAuth protocols.
• Knowledge of cryptographic algorithms, symmetric/asymmetric techniques, digital signatures, JWK/JWE tokens, and HSMs.
• Familiarity with Cloud security vulnerabilities, Threat Modelling, Secure Development Life Cycle (SDLC), and Mobile Application Security.

Key Skills

Education

Any Graduate