Security Test Engineer

• Understanding of Cloud based security services, security tools, with experience in AWS and any private cloud
• Vulnerability management & PenTesting
• Key/secret management best practices
• Designing and implementing E2E encryption controls
• Access (authN/Z) management
• Session tracking
• Layer 4 and 7 security protection Good analytical and problem solving skills with ability to find root cause of issues and do impact analysis of defect fixes
• Excellent Communication skills
Must Have
• >4 years of experience in Vulnerability Scanning, Analsyis & Penetration Testing of Cloud hosted Application, APIs and networks
• 2-3 years of experience in Python/Shell Scripting
• Experience in Security Testing tools
• Good understanding of cloud security services/tools of atleast one of the CSPs (AWS, GCP or Azure)
• Should be able to script and automate security test cases • Good understanding of common app/apis/network vulnerabilities (Owasp Top 10s, SANS Top 25, CVEs, CWEs..)
Nice to Have
• Any one of the Ethical Hacking and Penetration testing Certification like CEH, OSCP, Comp TIA PenTest+ • Exposure in Ethical Hacking competitions and programs like Bug Bounty, Capture the Flag etc