Job Details

• Conduct web application security assessments and penetration tests.
• Assess applications for issues surrounding Authentication, Authorization, User management,
• Session management, Data validation, including all common attacks such as SQL injection,
• Cross-site scripting, Command injection, Error handling, Auditing and logging.
• Assess the security aspects of Web Services design and implementation, including confidentiality,
• integrity, trust relationships, and authentication using security standards like XML
• Signatures, XML encryption, SAML, and WS-Security.
• Thick client assessment experience
• Write formal security assessment reports for each application, using Foundstone reporting Format.
• Participate in conference calls with clients to perform initial data gathering and a follow-up advisory for technical issues.
• Vulnerability and network penetration assessments
• Mobile applications security testing
• Publish whitepapers, tools and deliver presentations.
• Cloud application Security testing

• Knowledge of tools such as Fiddler, Paros, Burp, Sqlmap, Nikto, Nmap, Openssl, Mallory,
• Wireshark etc.
• Mobile application development, assessment (iOS, Android, Windows) experience
• Web application development experience in any of the major languages such as C#, Java, PHP, ASP.NET etc. is a plus
• Knowledge of scripting languages such as Python, JavaScript, Ruby, SQL etc. is a plus
• Experience reviewing code in C, C++, Java, PHP, C#, ASP.NET, Go etc.
• Familiarity with automated source code analysis tools such as Acunetix , Appscan etc.
• Certifications such as OSCP or CEH is a plus
• Working knowledge of version control software like git and Subversion.
• Can demonstrate Company’s core values: Innovation, Excellence, Agility, Integrity, Community, and Respect.

Reference ID - GH/Technology/JC//21112019//87816/Software Engineering Professional