Job Description :
HI,
Role : Application Security Tester
Work Location: Dallas, TX
Duration : 6 Months
Job Details:
Must Have Skills
Application Security ALL
DevSecops
handson security testing tools
Nice to have skills
AZUREGCP exp
java, java script
Detailed Job Description
Develop security test plans, procedures, automated test scripts and tooling that provides 100% coverage for identified security risks and regression
Develop a test suite and related tooling to assist in regression testing for application security vulnerabilities
Work collaboratively with the DevOps team in order to plan, deploy and run automated tests in test environments
Perform usability testing while ensuring user privacy concerns are addressed
Perform network penetration, web, mobile and business application testing, source code reviews, threat analysis, wireless network assessments and OT/IoT security assessments
Identify security vulnerabilities within web and mobile based applications
Provide analysis and remediation recommendations to application and infrastructure teams on security issues
Participate in product design reviews to provide input for potential security risks
Recognize and safely utilize attacker tools, tactics, and procedures
Skills:
Azure/GCP experience specifically testing cloud native software in Azure/GCP (preferred) or public clouds.
Testing containerized applications, PaaS resources (databases, caches, messaging systems), familiarity withthreat modeling and methodologies, testing API security, infra security, with focus on java/golang applications.
Expert knowledge of Windows & Linux, TCP/IP, and Web services
Experience with various security tools and products (Metaspolit, Nmap, Qualys, mimikatz, Nessus, NeXpose, Kali Linux, BurpSuite, OWASP ZAP, WireShark, Tcpdump, etc
Experience in Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Origin Analysis/Software Composition Analysis (SCA) and Database Security Scanning
Programing experience with java, javaScript, python, sql database
Certifications Needed :Yes CEH, OSCP, Cloud Security Certification