1077737-Lead Assistant Manager

EXL; Dadri; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

EXL in India is seeking a security-focused Penetration Tester to perform web, mobile, thick client, and API testing. You will report findings to stakeholders and contribute to risk assessments, with exposure to cloud resources such as EKS, ECS, and Lambda.

The role involves code review using Fortify, DAST with Fortify WebInspect and Burp Suite, coordinating audits, tracking vulnerabilities, and driving security initiatives.

Qualifications

• Experience in web, mobile, thick client, and API pen testing.
• Familiarity with cloud resources (EKS/ECS/Lambda).
• Experience with container assessments using Palo Alto Prisma.
• Ability to perform vulnerability research and risk analysis.
• Experience with internal and external penetration tests.

Responsibilities

• Perform web, mobile, API, and thick client penetration testing and report findings.
• Research new vulnerabilities and assess risk.
• Conduct internal and external penetration tests and track vulnerability closures.
• Perform code reviews using Fortify SCA; conduct DAST with Fortify WebInspect and Burp Suite.
• Coordinate with team for audits and regulatory assessments related to App Pentest, SAST, and FOSS.
• Mitigate risk by following procedures and monitoring controls.
• Manage new projects and security initiatives as needed.

Skills

Penetration testing

Cloud security

Vulnerability analysis

Code review

Regulatory awareness

Team coordination

Tools

Burp Suite

Fortify WebInspect

Fortify SCA

Job description

• To Perform Web, Mobile, Thick client, API Penetration Testing and releasing reports to stakeholders. Should have idea about Cloud resources like EKS/ECS/Lambda and can perform container assessment using Paloalto Prisma
• To test and research for new vulnerabilities
• Risk analysis and manual assessment of vulnerabilities, Execution of internal and external penetration tests.
• Tracking Closure of Vulnerabilities.
• Performing Code Review Using fortify SCA and DAST using Fortify WebInspect and PT through Burpsuite
• Coordinate with team members to track internal audit and regulatory assessments and address requests related to the Application Pentest, SAST and FOSS.
• Mitigates risk by following established procedures and monitoring controls, spotting key errors and demonstrating strong ethical behavior.
• Manage new projects and initiatives related to application security as needs arise.