Job Description:

• Identify and fix the entry points that attackers may use to exploit vulnerabilities or weaknesses leveraging your knowledge and information security tools such as Coverity among others, with support from Engineering


• Must have experience in Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), and Mobile Application Security Testing.


• Automate security controls in the cloud on multi-server integrated customer environments without impacting the customer's daily operations


• Assist DevOps and Cloud Security teams with evaluating, selecting, and implementing new security technologies and best practices into our SDLC and application security processes.


• Strong knowledge and experience in best practices for application security and secure SDLC development processes, and familiarity with tools for identifying security vulnerabilities in code, open source libraries, and cloud architecture; familiar with working with developers to implement.


• Expertise in using tools to perform penetration tests on computer systems, networks, and applications


• Hands-on with tools such as Nessus, Nmap, Burp Suite, Dirsearch, Frida, and Metasploit


• Strong experience in ethical hacking techniques, penetration testing, and use of vulnerability and pen testing tools to discover common vulnerabilities and exploits, and communicate to blue team engineers and developers remediation fixes.


• Experience in Integrating or refining tooling to automate and refine vulnerability management processes


• Familiarity with Web Server IIS, Tomcat, and Apache software


• Experience in collaboration with application developers and database administrators to deliver creative solutions to difficult technology challenges and business requirements


• Hands-on experience with Databases scripting and general administration tasks.


• Familiarity with Networking and integration of LAN and WAN domain operations


• Proven expertise and experience in information security architecture and systems engineering to other IT and business teams


• You’re keen on staying on top of emerging security threats, vulnerabilities, and controls


• Experience in Bug bounty hunting.


• Understand application and network security, penetrate and find vulnerabilities.