About the role
The Mandatory skills we are looking for this role is as below:
Direct Responsibilities
• To perform Penetration testing (Gray Box and/or Black Box), for Web applications, Thick Client, API, and mobile applications.
• Understand and deep knowledge of application security engineering principles to follow secure development practices which includes secure build processes, secure code review, security testing.
• Understanding of the security tools in DevOps Processes
• Knowledge of one or more scripting languages for automation
• Collaborate with the developers to help them understand the vulnerabilities reported in application.
Contributing Responsibilities
• To understand the application’s security requirements and identify & document the scope of the test.
• Ensure execution of the documented security scenarios for the application under test.
• Document and report all findings.
• Escalate issues to the local management and onshore stakeholders in case it affects the testing progress.
• Ensure processes for the project is followed for the assessments.
• Help review peer's work and mentor junior members in the team.
Technical & Behavioral Competencies
• Clear understanding of OWASP Top 10 - application security risks
• Tools/OS: Burp Suite, OWASP ZAP, Kali Linux
• Manual Security Testing & Analysis, Security Test Designing
• Excellent Interpersonal and presentation skills
• Strong in verbal and written communication
• Good analytical skills
• Strong Time Management
• Must be flexible, independent, self-motivated.
• Team Player
Compensation offered for this role : 10 – 15 LPA
Years of exp? 5 -7 years
Which CGI Office Locations are we open to? Bangalore (work from client office location)
3. Shift timings? Rotational shifts/ 24*7
4. Joining Timeframe. (Notice period): Immediate ; 15 days