Source description
About the role
Job Purpose Discover and Mitigate Cyber Risks and exploitable vulnerabilities on the internet facing apps/assets. Conduct Regular Vulnerability Assessment and Penetration Testing of the applications Experience with latest technologies and security standards such as OWASP, CVSS, Mitre etc. Mobile App Reversing and pen testing as Android and iOS applications security standards Familiarity with malicious code identification and common hacker attack techniques Conduct regular Secure Code and Architecture Review, SAST and DAST Latest technology security API, Microservices, RPA, IOT etc. Ethical Hacking and Red Teaming Activity Assess Third Party Partner vulnerabilities and security risk Remediations, Closures Tracking, Reporting and Management of all Cyber Risks Engage with technology Teams and partners and business units to resolve identified vulnerabilities within acceptable timelines Design and deliver actionable Information Security dashboards and scorecards Work with partners in carrying out comprehensive VAPT assessment Advanced understanding with working experience collecting and tracking threat intelligence Experience working with tracking, communicating, and prioritizing vulnerabilities and cyber threats to an enterprise-wide organization Duties and Responsibilities A-Minimum required Accountabilities for this role Engineering / Computer Graduate with 3-5 years of Information / Cyber Security Experience B-Additional Accountabilities pertaining to the role Relevant Security Certifications like CEH, CPENT, PNPT, EJPT, EWPT, EMAPT etc. preferred (Good to Have) Key Decisions / Dimensions Activity calendar planning Security Audits preparedness Preparation of testcases for infosec sign-offs Major Challenges Timely vulnerability closure Change management infosec sign off with in defined TAT Required Qualifications and Experience a)Qualifications Post-Graduates with relevant security experience of 4-6 years (also graduates with experience of 6-8 years may apply) b)Work Experience Engineering / Computer Graduate with 4-6 years of Information / Cyber Security Experience Relevant Security Certifications like CEH, CPENT, PNPT, EJPT, EWPT, EMAPT etc. preferred (Good to Have) Prior experience of Security Testing, OWASP Top 10 and application security Prior experience of Payment Testing, Mobile Applications and API Security testing Sound in latest application technologies and network attacks execution Good Written and Verbal Communication with Presentation Skills Good Team Player and sound in stakeholder management Threat Modelling, Cloud Security and WAF basics clarity DevOps / DevSecOps and Source Code security review experience is added boon Well versed with related tools and techniques of all the above
More at Bajaj Finance