Hiring Penetration tester | Naukri.com | Noida

Info Edge Limited; Dadri, Greater Noida; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Info Edge Limited in India is seeking an experienced Application Security Analyst to identify vulnerabilities and integrate security into the SDLC across systems and infrastructure. You will collaborate with development and operations teams to ensure secure coding practices and compliance with industry standards.

The role requires 5 years of VAPT experience and proficiency with tools like Burp Suite, Metasploit, Nmap, and knowledge of OWASP Top 10. Certifications are highly desirable.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Strong understanding of networking protocols, operating systems, and security technologies.
• Excellent analytical and problem-solving skills.
• Proficient in at least one scripting language.

Responsibilities

• Define and implement secure coding standards and practices.
• Conduct security assessments, code reviews, and penetration testing.
• Collaborate with development and operations teams to integrate security into the SDLC.
• Identify and prioritize application security risks and vulnerabilities.
• Design and implement security controls and solutions to mitigate risks.
• Stay updated with emerging threats and industry best practices.
• Drive compliance with relevant security standards and regulations.

Skills

VAPT

Web app security

Penetration testing

Security tooling

Threat intelligence

Communication skills

Scripting

Python

PowerShell

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Tools

Metasploit

Burp Suite

Nmap

Wireshark

Kali Linux

PowerShell Empire

Cobalt Strike

Job description

Job Title: Engineer Application Security

Experience Required : 5 years.

Job Summary

Seeking for a skilled and experienced Application Security Analyst who will play a crucial role in ensuring the security and resilience of our organisation’s systems, networks, and infrastructure. He will be collaborating closely with development and operations teams to integrate security practices throughout the software development lifecycle. The role will involve identifying vulnerabilities, defining and implementing secure coding practices, conducting security assessments, performing day to day WAF & BOT operations and ensuring compliance with industry standards and regulations.

Required Skills:

The candidate should have minimum experience 5 years in vulnerability assessment & penetration testing (VAPT).

Mandatory:

• Proven experience in application security, with a focus on web and mobile applications.
• Proficiency in wide range of security tools and frameworks, such as Metasploit, Burp Suite, Nmap, Wireshark, Kali Linux, PowerShell Empire, Cobalt Strike, and others.
• Awareness of current cyber threats, attack trends, and threat actor tactics, techniques, and procedures.
• Familiarity with industry standards (e.g., OWASP Top 10, CWE) and regulatory requirements (e.g., GDPR, PCI-DSS).
• Excellent communication and collaboration skills.

Good to have:

• Experience with cloud security, container security and DevSecOps practices is desirable.
• Experience in scripting and automation for integrations and associated implementations. (e.g., Python, PowerShell).

Certification:

Mandatory (atleast one):

Certifications such as Certified Red Team Operator (CRT), Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or GIAC Penetration Tester (GPEN) are highly desirable.

Good to have:

Certifications such as CREST Practitioner Security Analyst (CPSA), Certified Expert Penetration Tester (CEPT) etc.

Qualifications

1. Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).

2. Strong understanding of networking protocols, operating systems, and security technologies.

3. Excellent analytical and problem-solving skills.

4. Proficient in at least one scripting language.

Responsibilities:

1. Define and implement secure coding standards and practices.

2. Conduct security assessments, code reviews, and penetration testing.

3. Collaborate with development and operations teams to integrate security into the SDLC.

4. Identify and prioritize application security risks and vulnerabilities.

5. Design and implement security controls and solutions to mitigate risks.

6. Stay updated with emerging threats and industry best practices.

7. Drive compliance with relevant security standards and regulations.