Application Security Lead

Airtel Payments Bank; Gurugram District; In loco; INR 1.200.000 - 2.400.000; Tempo pieno

Descrizione del lavoro

Airtel Payments Bank seeks an experienced security professional to conduct thorough vulnerability assessments and penetration testing across web and mobile apps. You will work with Burp Suite, Nessus, Metasploit, and ZAP to identify weaknesses and guide remediation.

Required are 8+ years of hands-on testing experience, expertise in SAST/DAST tooling such as Checkmarx, Fortify, Veracode, and strong communication skills to convey risks to stakeholders. Prior CEH/OSCP/CISSP is preferred.

Competenze

• Bachelor's degree in Computer Science, Information Security, or related field.
• 8+ years of experience in vulnerability assessments and penetration testing.
• Hands-on with Burp Suite, Nessus, Metasploit, OWASP ZAP.
• Proficient in SAST/DAST using Checkmarx, Fortify, or Veracode.
• Strong knowledge of web app vulnerabilities (SQLi, XSS, CSRF) and mobile security.
• Experience testing Android/iOS apps and platform security controls.
• Excellent analytical and communication skills for stakeholders.
• Certs such as CEH, OSCP, CISSP preferred.

Mansioni

• Perform comprehensive vulnerability assessments and penetration tests.
• Analyze findings and provide actionable remediation guidance.
• Coordinate with development teams to prioritize security fixes.
• Document results and present risk insights to non-technical stakeholders.

Conoscenze

Vulnerability assessments

Penetration testing

Security assessment awareness

Communication skills

Formazione

Bachelor's degree in Computer Science/Information Security

Strumenti

Burp Suite

Nessus

Metasploit

OWASP ZAP

Checkmarx

Fortify

Veracode

Descrizione del lavoro

• Bachelor's degree in Computer Science, Information Security, or related field.
• Minimum of 8 years of experience in performing vulnerability assessments and penetration testing.
• Hands-on experience with industry-leading security assessment tools such as Burp Suite, Nessus, Metasploit, and OWASP ZAP.
• Proficiency in conducting Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) using tools like Checkmarx, Fortify, or Veracode.
• Strong understanding of common web application vulnerabilities (e.g., SQL injection, XSS, CSRF) and mobile application security principles.
• Experience in testing mobile applications on both Android and iOS platforms, including knowledge of platform-specific security controls and vulnerabilities.
• Excellent analytical and problem-solving skills with the ability to prioritize and manage multiple tasks in a fast-paced environment.
• Effective communication skills with the ability to convey technical information to non-technical stakeholders.
• Relevant industry certifications such as CEH, OSCP, or CISSP are preferred.

Preferred Qualifications:

• Experience in conducting Red Team exercises and simulated attacks.
• Knowledge of cloud security principles and experience with cloud service providers such as AWS, Azure, or GCP.
• Familiarity with DevSecOps practices and integrating security into the software development lifecycle (SDLC).

• Understanding of regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS) and their implications for security assessments.