Senior Software QA Engineer

Application window is expected to close on 09/20/2024.

What you will do:

1. This position is critically needed to support Product Security testing for Next Generation Firewall (NGFW). Participate in complete life cycle of features right from inception till it's get delivered as part of release includes Reviews, test planning, and end-to-end security testing.
2. Performs penetration testing on devices and features to exploit and compromise defined targets ranging from web applications to hardware.
3. Identify and exploit vulnerabilities in web applications, cloud, OS, hardware, and databases.
4. Participate in Product Security team as a senior subject matter expert and tester.
5. Write test plans and create and execute test cases.
6. Document technical and security findings identified during testing and security assessments and provide security recommendations.
7. Conduct vulnerability assessments, security audits, and risk assessments on complex systems.
8. Evaluate devices and features for possible attack vectors to either the device itself or the user.
9. Track bugs/vulnerabilities through development lifecycle to ensure resolve.

Minimum Qualifications:

1. Typically requires BS / MS with Computer Science / Computer Networks 5+ years of related experience.
2. 3+ years of web application penetration testing experience is a requirement. Technical knowledge of security engineering, computer and network security, authentication, and security protocols.
3. Experience in vulnerability identification and remediation is a requirement.

Preferred Qualifications:

1. Deep understanding of security principles, policies, and industry best practices.
2. Experience with using open-source security tools, with strong understanding of cross-site scripting, SQL injection and other web related vulnerabilities and attacks.
3. Experience in evasion techniques.
4. Experience using NMAP, Nessus, and other automated scanning tools.
5. Good Hands-on experience in Python, Java Script and API based development knowledge is required.
6. Good understanding of networking architecture such as Routing/Switching (OSPF / BGP, EIGRP, VLAN), IP, TCP/UDP, and application layers such as HTTP, SMTP, etc.
7. Good understanding in security products & technologies like Firewall, NAT, IPS, and VPN.
8. Having Cisco Certification such as CISSP, CISA, CEH, CCNA/CCNP/CCIE (Routing / Security) is a plus.
9. Experience in analyzing crash logs, stack trace, faults by utilizing basic debugging techniques.
10. Excellent analytical, communication and technical skills.
11. Ability to deliver results in a short time and experience working in fast paced high growth tech companies.