Job Description

Responsibilities

• Assisting in technical scoping of security testing activities
• Executing security testing: Static Application Security Testing, Dynamic Application Security Testing, Interactive Application Security Testing and Software Composition Analysis
• VM Management – Infrastructure Activities
• DevOps – Issue Analysis and Configuration knowledge
• Conducting focused research when not deployed on an active project
• Providing consultative guidance to customers on findings identified in a clear and actionable fashion both in writing and verbally.
• Enhancing and updating testing methodologies, processes and standards documentation
• Maintaining proficiency of knowledge through ongoing training paths
• Analyzing and understanding complex architecture designs.
• Ability to effectively communicate what services and capabilities our group can facilitate to our clients.

Skills

• Experience using common testing tools like Fortify Static Code Analyzer & Web Inspect, Contrast Assess and Scan, Burp, OWASP ZAP, Postman, Swagger, NMAP, SQLMap and others.
• Static Application Software Testing
• Dynamic Application Testing
• OWASP Application Security Top 10
• OWASP API Security Top 10
• OWASP Thick Client Top 10
• Familiarity with software security weakness and recent vulnerabilities
• Working knowledge of at least one scripting language (e.g., Python, Powershell)
• Familiarity with at least one software programming language and framework (e.g., C#, Java, JavaScript)
• Azure cloud and infrastructure
• Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis
• Ability to manage concurrent initiatives and use effective judgment in prioritization and time management
• Strong written and verbal communication skills